Cisco Digital Media Manager Default Credentials Authentication Bypass Vulnerability

Bugtraq ID:	38503
Class:	Design Error
CVE:	CVE-2010-0570
Remote:	Yes
Local:	No
Published:	Mar 03 2010 12:00AM
Updated:	Mar 12 2010 07:32PM
Credit:	Cisco
Vulnerable:	Cisco Digital Media Manager (DMM) 5.1 Cisco Digital Media Manager (DMM) 5.0 Cisco Digital Media Manager (DMM) 0
Not Vulnerable:	Cisco Digital Media Manager (DMM) 5.2

Cisco Digital Media Manager Default Credentials Authentication Bypass Vulnerability

Cisco Digital Media Manager (DMM) is prone to a remote authentication-bypass vulnerability.

Successful exploits allow remote attackers to gain access to the vulnerable application.

This issue is being tracked by Cisco bug ID CSCta03378.

Cisco Digital Media Manager Default Credentials Authentication Bypass Vulnerability

Attackers can use readily available tools to exploit this issue.

Cisco Digital Media Manager Default Credentials Authentication Bypass Vulnerability

Solution:
The vendor has released an advisory along with fixes. Please see the referenced advisory for details.

Cisco Digital Media Manager Default Credentials Authentication Bypass Vulnerability

References:

• Cisco Security Advisory: Multiple Vulnerabilities in Cisco Digital Media Manager (Cisco)
  
• Digital Media Manager Homepage (Cisco)