Sydney Morning Herald: Open Source or Open Sesame?
Apr 13, 2004, 01:00 (1 Talkback[s])
(Other stories by Leon Brooks)
[ Thanks to Jason
Greenwood for this link. ]
"A recent Cisco security advisory announced that 'all models' of
their WLSE and HSE wireless LAN devices have a hard-coded back-door
password which gives an attacker complete control over that section
of your infrastructure.
"Firstly, it is to Cisco's credit that they follow a policy of
openly announcing such an embarrassing vulnerability. Many
providers prefer to hide their problems, fold any fixes into
routine updates and hope their customers pick up those updates
before any malefactors pick up control of the customers' networks,
which in this age of several probes per internet address per minute
is totally unacceptable..."