Unscored CVE-2000-0772 EUVD-2000-0766GHSA-ph7q-8jfj-8h3x

The installation of Tumbleweed Messaging Management System (MMS) 4.6 and earlier (formerly Worldtalk Worldsecure) creates a default account…

Published Sep 21, 2000 · Updated Aug 8, 2024 · Assigned by mitre

Description

The installation of Tumbleweed Messaging Management System (MMS) 4.6 and earlier (formerly Worldtalk Worldsecure) creates a default account "sa" with no password.

References

http://thompson.tumbleweed.com/NewKB/bulletin/UPFiles/sa-official.htm
tumbleweed-mms-blank-password(5072) vdb-entry
1562 vdb-entry
20000810 Tumbleweed Worldsecure (MMS) BLANK 'sa' account password vulnerability mailing-list