PT-2004-1462 · Cisco+1 · Cisco Ons 15600+4

Publicado 2004-03-18 · Atualizado 2018-10-30 · CVE-2004-0308

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco ONS 15327 versions prior to 4.1(3) Cisco ONS 15454 versions prior to 4.6(1) Cisco ONS 15454 SD versions prior to 4.1(3) Cisco ONS 15600 versions prior to 1.3(0)

Description The issue allows a superuser whose account is locked out, disabled, or suspended to gain unauthorized access via a Telnet connection to the VxWorks shell.

Recommendations For Cisco ONS 15327 versions prior to 4.1(3), update to version 4.1(3) or later. For Cisco ONS 15454 versions prior to 4.6(1), update to version 4.6(1) or later. For Cisco ONS 15454 SD versions prior to 4.1(3), update to version 4.1(3) or later. For Cisco ONS 15600 versions prior to 1.3(0), update to version 1.3(0) or later.

Correção

Identificadores relacionados

CVE-2004-0308

Produtos afetados

Cisco Ons 15327

Cisco Ons 15454

Cisco Ons 15454 Sd

Cisco Ons 15600

Vxworks

Referências · 5

• https://exchange.xforce.ibmcloud.com/vulnerabilities/15266 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-0308 · Nota de Segurança
• http://securityfocus.com/bid/9699 · Aviso do Fabricante
• http://osvdb.org/4010 · Nota
• http://cisco.com/warp/public/707/cisco-sa-20040219-ONS.shtml · Aviso do Fabricante