SurfControl SuperScout Default Administrator Password

2002-10-01T00:00:00
ID OSVDB:3497
Type osvdb
Reporter OSVDB
Modified 2002-10-01T00:00:00

Description

Vulnerability Description

By default, SurfControl web filters install with a default password. The Administrator account has a password of "admin" which is publicly known and documented. This allows attackers to trivially access the program or system.

Solution Description

Immediately after installation, change all default install passwords to a unique and secure password. When possible, change default accounts to custom names as well.

Short Description

By default, SurfControl web filters install with a default password. The Administrator account has a password of "admin" which is publicly known and documented. This allows attackers to trivially access the program or system.

References:

Other Advisory URL: http://www.westpoint.ltd.uk/advisories/wp-02-0005.txt