[TriLUG] Green Hills calls Linux 'insecure' for defense

[Mike Broome]

On Mon, Apr 12, 2004 at 11:54:09PM -0400, Tanner Lovelace wrote:
> Wasn't there something that came out recently about a bunch of cisco
> routers having a hardwired username and password that couldn't be
> disabled?!?  Or was I just dreaming?

You're only partially dreaming.  There was a recent security advisory
from Cisco about two products having a hardwired backdoor username and
password, but it was NOT the routers or Cisco IOS that was affected.

The products affects are the Wireless LAN Solution Engine (WLSE) and
Hosting Solution Engine (HSE) software.  WLSE is part of the CiscoWorks
network management solution.  HSE is a hardware-based solution used to
monitor layer 2-3 fault and performance information and control layer
4-7 hosted services in Cisco powered data centers.

Here is the security advisory from Cisco:

http://www.cisco.com/warp/public/707/cisco-sa-20040407-username.shtml

And here is the /. story:

http://yro.slashdot.org/article.pl?sid=04/04/08/1920228&mode=thread&tid=126&tid=158&tid=172&tid=99

Mike

-- 
Mike Broome
mbroome(at)employees.org