PT-2000-1327 · Nortel · Netstructure

Publicado 2000-05-08 · Atualizado 2008-09-05 · CVE-2000-0384

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions NetStructure versions 7110 and 7180

Description The issue concerns easily guessable passwords for undocumented accounts, including servnow, root, and wizard, which can be derived from the NetStructure's MAC address. This could allow remote attackers to gain root access.

Recommendations For NetStructure versions 7110 and 7180, consider changing the default passwords of the undocumented accounts servnow, root, and wizard to strong, unique passwords to prevent easy guessing. As a temporary workaround, restrict remote access to the NetStructure devices until a more secure configuration can be implemented.

Exploit

Correção

Identificadores relacionados

CVE-2000-0384

Produtos afetados

Netstructure

Referências · 7

• 🔥 https://exploit-db.com/exploits/19904 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2000-0384 · Nota de Segurança
• http://lopht.com/advisories/ipivot7110.html · Aviso do Fabricante
• http://securityfocus.com/bid/1183 · Aviso do Fabricante
• http://securityfocus.com/bid/1182 · Aviso do Fabricante
• http://216.188.41.136 · Nota
• http://l0pht.com/advisories/ipivot7180.html · Aviso do Fabricante