EUVD-2006-2323

Malware in sbrugna...

EUVD-2008-0042

Malware in sbrugna...

Cisco Security Advisory: Default Passwords in the Application Velocity System

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Default Passwords in the Application Velocity System Advisory ID: cisco-sa-20080123-avs http://www.cisco.com/warp/public/707/cisco-sa-20080123-avs.shtml Revision 1.0 For Public Release 2008 January 23 1600 UTC GMT...

Cisco Application Velocity System default account

Password for default account is not generated during installation...

CVE-2008-0029: Undefined Security Weakness

Cisco Application Velocity System AVS before 5.1.0 is installed with default passwords for some system accounts, which allows remote attackers to gain privileges...

CVE-2006-2322: Undefined Security Weakness

The transparent proxy feature of the Cisco Application Velocity System AVS 3110 5.0 and 4.0 and earlier, and 3120 5.0.0 and earlier, has a default configuration that allows remote attackers to proxy arbitrary TCP connections, aka Bug ID CSCsd32143...

Cisco Application Velocity System TCP port relaying

Default configuration allows any TCP port to be accessed with transparent HTTP proxy request...