Shiva LanRover Default Password

2002-09-12T00:00:00
ID OSVDB:820
Type osvdb
Reporter OSVDB
Modified 2002-09-12T00:00:00

Description

Vulnerability Description

By default, the Shiva LanRover installs with a default password. The root account has no password which is publicly known and documented. This allows attackers to trivially access the program or system.

Technical Description

An attacker is able to telnet to this device and gain access to any phone lines attached.

Solution Description

Immediately after installation, change all default install passwords to a unique and secure password. When possible, change default accounts to custom names as well.

Short Description

By default, the Shiva LanRover installs with a default password. The root account has no password which is publicly known and documented. This allows attackers to trivially access the program or system.

References:

Generic Informational URL: http://www.ispeed.org/password.htm Generic Informational URL: http://www.cirt.net/cgi-bin/passwd.pl?method=showven&ven=Intel CVE-1999-0508