PT-2000-1704 · Tumbleweed · Tumbleweed Messaging Management System

Published 2000-10-20 · Updated 2017-12-19 · CVE-2000-0772

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Tumbleweed Messaging Management System (MMS) versions 4.6 and earlier

Description The installation of the system creates a default account sa with no password.

Recommendations For versions 4.6 and earlier, change the password of the default sa account immediately after installation to prevent unauthorized access.

Fix

Related Identifiers

CVE-2000-0772

Affected Products

Tumbleweed Messaging Management System

References · 5

• http://securityfocus.com/bid/1562 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2000-0772 · Security Note
• http://archives.neohapsis.com/archives/bugtraq/2000-08/0098.html · Vendor Advisory
• http://thompson.tumbleweed.com/NewKB/bulletin/UPFiles/sa-official.htm · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5072 · Note