Cisco Security Monitoring Analysis and Response System Password Information Disclosure Vulnerability

Bugtraq ID:	36098
Class:	Design Error
CVE:
Remote:	No
Local:	Yes
Published:	Aug 21 2009 12:00AM
Updated:	Aug 21 2009 06:03PM
Credit:	Ryan Wessels
Vulnerable:	Nortel Networks Contivity 2000 VPN Switch 4.1.3 Nortel Networks Contivity 2000 VPN Switch 4.1.2 Nortel Networks Contivity 2000 VPN Switch 4.1 Cisco Security Mars 4.2.2 Cisco CS-MARS 6.0.4 Cisco CS-MARS 4.2.3 Cisco CS-MARS 4.2.2 Cisco CS-MARS 4.2.1 Cisco CS-MARS 4.1.5
Not Vulnerable:

Cisco Security Monitoring Analysis and Response System Password Information Disclosure Vulnerability

Cisco Security Monitoring, Analysis, and Response System (MARS) is prone to a local information-disclosure vulnerability.

Local attackers can exploit this issue to obtain sensitive information that can aid in further attacks.

This issue is being tracked by Cisco Bug CSCtb52450.

Cisco Security MARS 6.0.4 and prior are vulnerable.

Cisco Security Monitoring Analysis and Response System Password Information Disclosure Vulnerability

An attacker can use readily available utilities to exploit this issue.

Cisco Security Monitoring Analysis and Response System Password Information Disclosure Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Cisco Security Monitoring Analysis and Response System Password Information Disclosure Vulnerability

References:

• Cisco Security Monitoring, Analysis and Response System Homepage (Cisco)
  
• Clear Text Storage of Password in CS-MARS v6.0.4 and Earlier ([email protected])
  
• Re: Clear Text Storage of Password in CS-MARS v6.0.4 and Earlier (Eloy Paris )