Phase:The installation of Tumbleweed Messaging Management System (MMS) 4.6 and earlier (formerly Worldtalk Worldsecure) creates a default account "sa" with no password.
ReferencesBUGTRAQ:Thursday, August 10, 2000 Tumbleweed Worldsecure (MMS) BLANK 'sa' account password vulnerability | URL:http://archives.neohapsis.com/archives/bugtraq/2000-08/0098.html | CONFIRM:http://thompson.tumbleweed.com/NewKB/bulletin/UPFiles/sa-official.htm | BI
Votes:Modified (Tuesday, January 16, 2001-01)
Comments: ACCEPT(2) Levy, Baker | MODIFY(1) Frech | NOOP(3) Cole, Christey, Wall
F7: Christey> XF:tumbleweed-mms-blank-password | http://xforce.iss.net/static/5072.php | Frech> XF:umbleweed-mms-blank-password(5072)