PT-2007-3615 · Cisco+1 · Cisco Network Services (Cns) Netflow Collection Engine+1

Publicado 2007-04-26 · Atualizado 2017-07-29 · CVE-2007-2282

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco Network Services (CNS) NetFlow Collection Engine (NFC) versions prior to 6.0

Description The issue allows remote attackers to modify the product configuration. When installed on Linux, it also allows attackers to obtain login access to the host operating system. This is due to an nfcuser account with a default password.

Recommendations For versions prior to 6.0, change the default password of the nfcuser account to prevent unauthorized access. As a temporary workaround, consider restricting access to the NFC service until the default password is changed.

Correção

Identificadores relacionados

CVE-2007-2282

Produtos afetados

Cisco Network Services (Cns) Netflow Collection Engine

Linux

Referências · 8

• https://nvd.nist.gov/vuln/detail/CVE-2007-2282 · Nota de Segurança
• http://securitytracker.com/id?1017960 · Nota
• http://kb.cert.org/vuls/id/127545 · Nota
• http://securityfocus.com/bid/23647 · Nota
• http://osvdb.org/35524 · Nota
• http://vupen.com/english/advisories/2007/1545 · Nota
• http://cisco.com/en/US/products/products_security_advisory09186a008082c520.shtml · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33861 · Nota