Default Password (toor) for 'root' Account

Critical Nessus Plugin ID 35777

An account on the remote host uses a known defautl password.

The account 'root' on the remote host has the password 'toor'. An attacker may leverage this issue to gain total control of the affected system.

Change the password for this account or disable it.

Severity: Critical

ID: 35777

File Name: account_root_toor.nasl

Version: 1.21

Type: remote

Family: Default Unix Accounts

Published: 2009/03/05

Updated: 2018/07/25

Dependencies: 55900, 10267, 10281

Risk Factor: Critical

Base Score: 10

Temporal Score: 8.1

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:POC/RL:TF/RC:C

Base Score: 9.8

Temporal Score: 8.9

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:P/RL:T/RC:C

Excluded KB Items: global_settings/supplied_logins_only

Exploit Available: false

Exploit Ease: No exploit is required

Metasploit (SSH User Code Execution)

CVE: CVE-1999-0502