CVE-2002-1554

Currently unrated

Key Information:

Vendor
Cisco
Status
Optical Networking Systems Software
Vendor
CVE Published:
31 March 2003

Summary

Cisco ONS15454 and ONS15327 running ONS before 3.4 stores usernames and passwords in cleartext in the image database for the TCC, TCC+ or XTC, which could allow attackers to gain privileges by obtaining the passwords from the image database or a backup.

References

http://www.iss.net/security_center/static/10506.php
vdb-entryx_refsource_XF
http://www.securityfocus.com/bid/6078
vdb-entryx_refsource_BID
http://www.cisco.com/warp/public/707/ons-multiple-vuln-pu...
vendor-advisoryx_refsource_CISCO

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.