| darthfeces 2005-08-03, 4:24 pm |
| Cisco CCO Password Issue
from today's sans diary .....
Cisco CCO Password Issue
Ever have one of those days? Looks like Cisco is having one of those months... It appears that something has happened to compromise the passwords for their Cisco Connection Online service. What exactly happened? Cisco isn't saying.
Attempting to log into CCO brings up the following terse message:
IMPORTANT NOTICE:
* Cisco has determined that Cisco.com password protection has been
compromised.
* As a precautionary measure, Cisco has reset your password. To receive
your new password, send a blank e-mail, from the account which you entered
upon registration, to cco-locksmith@cisco.com. Account details with a new
random password will be e-mailed to you.
* If you do not receive your new password within five minutes, please
contact the Technical Support Center.
* This incident does not appear to be due to a weakness in Cisco products
or technologies.
<crude_sarcasm> Note: I do, indeed, know what caused this issue, but I've been enjoined from disclosing it until next year's Black Hat. </crude_sarcasm>
Gotta love that last bullet point... It reinforces that old security maxim: All the technology in the world won't save you from doing something dumb.
__________________
http://www.cisco.com/univercd/ |