Cisco Security Manager unauthorized access

Unauthorized MySQL database access is possible if used with Cisco IPS Event Viewer...

CVE-2008-3820: Undefined Security Weakness

Cisco Security Manager 3.1 and 3.2 before 3.2.2, when Cisco IPS Event Viewer IEV is used, exposes TCP ports used by the MySQL daemon and IEV server, which allows remote attackers to obtain "root access" to IEV via unspecified use of TCP sessions to these ports...

Cisco Security Advisory: Cisco Security Manager Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Security Manager Vulnerability Advisory ID: cisco-sa-20090121-csm http://www.cisco.com/warp/public/707/cisco-sa-20090121-csm.shtml Revision 1.0 For Public Release 2009 January 21 1600 UTC GMT -...