CVE-2009-2977

The CVE-2009-2977 entry concerns Cisco CS-MARS (Security Monitoring, Analysis and Response System) 6.0.4 and earlier. The underlying issue is that cleartext passwords are stored in log files (log/sysbacktrace.## files) inside error-logs.tar.gz archives, which could let context-dependent attackers...

CVE-2006-0181

CS-MARS (Cisco Security Monitoring, Analysis and Response System) is affected by CVE-2006-0181 in versions before 4.1.3 due to an undocumented administrative account with a default password that allows local privilege escalation via the expert command. This is the concrete vulnerability described...

CVE-2006-3732

CS-MARS (Cisco Security Monitoring, Analysis and Response System) is affected before version 4.2.1 due to an Oracle database that ships with default accounts and passwords, enabling attackers to obtain sensitive information. The sources explicitly tie this to CS-MARS and the vulnerable component ...

CVE-2006-3734

Cisco CS-MARS (Security Monitoring, Analysis and Response System) prior to version 4.2.1 contains multiple vulnerabilities in the CLI that allow local administrators to execute arbitrary commands as root. Affected component is the CLI interface; root-level privilege escalation is the impact state...