PT-2000-1866 · Cisco · Cisco Virtual Central Office 4000

Published 2000-12-19 · Updated 2017-12-19 · CVE-2000-0955

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Cisco Virtual Central Office 4000 (VCO/4K) (affected versions not specified)

Description The issue concerns the use of weak encryption to store usernames and passwords in the SNMP MIB. An attacker who knows the community name can exploit this to crack the password and gain privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2000-0955

Affected Products

Cisco Virtual Central Office 4000

References · 5

• 🔥 http://securityfocus.com/bid/1885 · Exploit
• 🔥 https://exploit-db.com/exploits/20372 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2000-0955 · Security Note
• http://atstake.com/research/advisories/2000/a102600-1.txt · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5425 · Note