Symantec ON Command CCM 5.4.x and iCommand 3.0.x has four default usernames and passwords, one of which is hardcoded, which allows remote attackers to gain unauthorized access.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| On_command_ccm | Symantec | 5.0 (including) | 5.0 (including) |
| On_command_ccm | Symantec | 5.1 (including) | 5.1 (including) |
| On_command_ccm | Symantec | 5.2 (including) | 5.2 (including) |
| On_command_ccm | Symantec | 5.3 (including) | 5.3 (including) |
| On_command_ccm | Symantec | 5.4 (including) | 5.4 (including) |
| On_icommand | Symantec | 3.0 (including) | 3.0 (including) |
References
- http://marc.info/?l=bugtraq\u0026m=109571689621784\u0026w=2
- http://secunia.com/advisories/12604
- http://www.sarc.com/avcenter/security/Content/2004.09.29.html
- http://www.securityfocus.com/bid/11225
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17447
- http://marc.info/?l=bugtraq\u0026m=109571689621784\u0026w=2
- http://secunia.com/advisories/12604
- http://www.sarc.com/avcenter/security/Content/2004.09.29.html
- http://www.securityfocus.com/bid/11225
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17447