PT-2000-1704 · Tumbleweed · Tumbleweed Messaging Management System

Publicado 2000-10-20 · Atualizado 2017-12-19 · CVE-2000-0772

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Tumbleweed Messaging Management System (MMS) versions 4.6 and earlier

Description The installation of the system creates a default account sa with no password.

Recommendations For versions 4.6 and earlier, change the password of the default sa account immediately after installation to prevent unauthorized access.

Correção

Identificadores relacionados

CVE-2000-0772

Produtos afetados

Tumbleweed Messaging Management System

Referências · 5

• http://thompson.tumbleweed.com/NewKB/bulletin/UPFiles/sa-official.htm · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5072 · Nota
• http://securityfocus.com/bid/1562 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2000-0772 · Nota de Segurança
• http://archives.neohapsis.com/archives/bugtraq/2000-08/0098.html · Aviso do Fabricante