PT-2008-1692 · Cisco · Cisco Application Velocity System

Published 2008-01-23 · Updated 2017-08-08 · CVE-2008-0029

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco Application Velocity System (AVS) versions prior to 5.1.0

Description The issue allows remote attackers to gain privileges due to default passwords being used for some system accounts.

Recommendations For versions prior to 5.1.0, update to version 5.1.0 or later to change the default passwords for system accounts and prevent remote attackers from gaining privileges.

Fix

Weakness Enumeration

CWE-255

Related Identifiers

CVE-2008-0029

Affected Products

Cisco Application Velocity System

References · 6

• http://cisco.com/warp/public/707/cisco-sa-20080123-avs.shtml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-0029 · Security Note
• http://securityfocus.com/bid/27421 · Note
• http://vupen.com/english/advisories/2008/0260 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39860 · Note
• http://securitytracker.com/id?1019259 · Note