Unintentional Password Modification Vulnerability in Cisco Firewall Pr oducts

["Fergie" <fergdawg () netzero net>]

Via Cisco.

[snip]

Certain versions of the software for the Cisco PIX 500 Series Security
Appliances, the Cisco ASA 5500 Series Adaptive Security Appliances
(ASA), and the Firewall Services Module (FWSM) are affected by a
software bug that may cause the EXEC password, passwords of locally
defined usernames, and the enable password in the startup configuration
to be changed without user intervention.

Unauthorized users can take advantage of this bug to try to gain access
to a device that has been reloaded after passwords in its startup
configuration have been changed. In addition, authorized users can be
locked out and lose the ability to manage the affected device.

[snip]

More:
http://www.cisco.com/en/US/products/products_security_advisory09186a00807183b0.shtml

- ferg


--
"Fergie", a.k.a. Paul Ferguson
 Engineering Architecture for the Internet
 fergdawg(at)netzero.net
 ferg's tech blog: http://fergdawg.blogspot.com/


_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.