Command CCM Symantec数据库默认密码漏洞

Command CCM 5.4.x和iCommand 3.0.x上的Symantec4中4个默认用户名和密码中的一个存在hardcoded漏洞。远程攻击者可以利用该漏洞获得未授权访问权限。

Symantec has released an advisory (SYM04-014) along with patches dealing with this issue. Customers are advised to visit
http://www.symantec.com/techsupp to acquire the appropriate patch. Please see the referenced advisory for more information.

来源: XF
名称: oncommand-multiple-default-accounts(17447)
链接:http://xforce.iss.net/xforce/xfdb/17447

来源: BID
名称: 11225
链接:http://www.securityfocus.com/bid/11225

来源: SECUNIA
名称: 12604
链接:http://secunia.com/advisories/12604

来源: www.sarc.com
链接:http://www.sarc.com/avcenter/security/Content/2004.09.29.html

来源: BUGTRAQ
名称: 20040920 Default username/password pairs in ON Command CCM 5.x database
链接:http://marc.theaimsgroup.com/?l=bugtraq&m=109571689621784&w=2