ISS ICEcap Default Password

2002-09-12T00:00:00
ID OSVDB:312
Type osvdb
Reporter OSVDB
Modified 2002-09-12T00:00:00

Description

Vulnerability Description

By default, IceCap installs with a default password. The iceman account has no password which is publicly known and documented. This allows attackers to trivially access the program or system.

Solution Description

Immediately after installation, change all default install passwords to a unique and secure password. When possible, change default accounts to custom names as well.

Short Description

By default, IceCap installs with a default password. The iceman account has no password which is publicly known and documented. This allows attackers to trivially access the program or system.

References:

Vendor URL: http://www.networkice.com Vendor Specific Solution URL: http://www.iss.net/security_center/advice/Support/KB/q000167/ Vendor Specific Advisory URL Nessus Plugin ID:10410 ISS X-Force ID: 4476 Generic Informational URL: http://www.cirt.net/cgi-bin/passwd.pl?method=showven&ven=NetworkICE CVE-2000-0350 Bugtraq ID: 1216