CVE

Id
3454  
CVE No.
CVE-2001-0645  
Status
Candidate  
Description
Symantec/AXENT NetProwler 3.5.x contains several default passwords, which could allow remote attackers to (1) access to the management tier via the "admin" password, or (2) connect to a MySQL ODBC from the management tier using a blank password.  
Phase
Modified (20050510)  
Votes
ACCEPT(5) Baker, Cole, Frech, Prosser, Ziese | NOOP(2) Foat, Wall  
Comments
Prosser> Additional Reference | http://www.sarc.com/avcenter/security/Content/2001_05_08.html | Prosser> Add Symantec vendor advisory source | http://securityresponse.symantec.com/avcenter/security/Content/2001_05_08.html  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
14999 3454 CVE-2001-0645 BUGTRAQ:20010510 Corsaire Limited Security Advisory - Symantec/Axent NetProwler 3. 5.x password restrictions  View
15000 3454 CVE-2001-0645 URL:http://archives.neohapsis.com/archives/bugtraq/2001-05/0097.html  View
15001 3454 CVE-2001-0645 BUGTRAQ:20010510 Corsaire Limited Security Advisory - Symantec/Axent NetProwler 3. 5.x database configuration  View
15002 3454 CVE-2001-0645 URL:http://archives.neohapsis.com/archives/bugtraq/2001-05/0098.html  View
15003 3454 CVE-2001-0645 CERT-VN:VU#508387  View
15004 3454 CVE-2001-0645 URL:http://www.kb.cert.org/vuls/id/508387  View
15005 3454 CVE-2001-0645 XF:netprowler-default-odbc-password(6539)  View
15006 3454 CVE-2001-0645 URL:http://xforce.iss.net/static/6539.php  View
15007 3454 CVE-2001-0645 XF:netprowler-default-management-password(6537)  View

Related JVN