PT-2000-1327 · Nortel · Netstructure

Published 2000-05-08 · Updated 2008-09-05 · CVE-2000-0384

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions NetStructure versions 7110 and 7180

Description The issue concerns easily guessable passwords for undocumented accounts, including servnow, root, and wizard, which can be derived from the NetStructure's MAC address. This could allow remote attackers to gain root access.

Recommendations For NetStructure versions 7110 and 7180, consider changing the default passwords of the undocumented accounts servnow, root, and wizard to strong, unique passwords to prevent easy guessing. As a temporary workaround, restrict remote access to the NetStructure devices until a more secure configuration can be implemented.

Exploit

Fix

Related Identifiers

CVE-2000-0384

Affected Products

Netstructure

References · 7

• 🔥 https://exploit-db.com/exploits/19904 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2000-0384 · Security Note
• http://lopht.com/advisories/ipivot7110.html · Vendor Advisory
• http://securityfocus.com/bid/1183 · Vendor Advisory
• http://securityfocus.com/bid/1182 · Vendor Advisory
• http://l0pht.com/advisories/ipivot7180.html · Vendor Advisory
• http://216.188.41.136 · Note