CVE-2007-2282

Cisco Network Services (CNS) NetFlow Collection Engine (NFC) before 6.0 has an nfcuser account with the default password nfcuser, which allows remote attackers to modify the product configuration and, when installed on Linux, obtain login access to the host operating system.

Link	Resource
http://www.cisco.com/en/US/products/products_security_advisory09186a008082c520.shtml	Vendor Advisory
http://www.securityfocus.com/bid/23647
http://securitytracker.com/id?1017960
http://www.kb.cert.org/vuls/id/127545	US Government Resource
http://www.vupen.com/english/advisories/2007/1545
http://www.osvdb.org/35524
https://exchange.xforce.ibmcloud.com/vulnerabilities/33861

Configuration 1

cpe:2.3:a:cisco:netflow_collection_engine:2.0:*:*:*:*:*:*:* cpe:2.3:a:cisco:netflow_collection_engine:3.5:*:*:*:*:*:*:* cpe:2.3:a:cisco:netflow_collection_engine:3.6:*:*:*:*:*:*:* cpe:2.3:a:cisco:netflow_collection_engine:5.0:*:*:*:*:*:*:* cpe:2.3:a:cisco:netflow_collection_engine:4.0:*:*:*:*:*:*:* cpe:2.3:a:cisco:netflow_collection_engine:3.0:*:*:*:*:*:*:* cpe:2.3:a:cisco:netflow_collection_engine:5.0.3:*:*:*:*:*:*:* cpe:2.3:a:cisco:netflow_collection_engine:1.0:*:*:*:*:*:*:*

---

Published : 2007-04-26 07:19

Updated : 2017-07-29 01:31

---

NVD link : CVE-2007-2282

Mitre link : CVE-2007-2282

No products.

NVD-CWE-Other