PT-2004-2600 · Symantec · Symantec On Command Ccm+1

Jonas Olsson · Published 2004-09-21 · Updated 2017-07-11 · CVE-2004-1694

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Symantec ON Command CCM versions 5.4.x Symantec iCommand versions 3.0.x

Description The issue allows remote attackers to gain unauthorized access due to the presence of default usernames and passwords, one of which is hardcoded.

Recommendations For Symantec ON Command CCM version 5.4.x, change the default usernames and passwords to prevent unauthorized access. For Symantec iCommand version 3.0.x, change the default usernames and passwords to prevent unauthorized access.

Exploit

Fix

Related Identifiers

CVE-2004-1694

Affected Products

Symantec On Command Ccm

Symantec Icommand

References · 6

• 🔥 http://secunia.com/advisories/12604 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2004-1694 · Security Note
• http://sarc.com/avcenter/security/Content/2004.09.29.html · Vendor Advisory
• http://securityfocus.com/bid/11225 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17447 · Note
• http://marc.info/?l=bugtraq&m=109571689621784&w=2 · Note