[cisco-voip] Re: Cisco Security Advisory: Cisco Unity Integrated withExchange Has Default Passwords

[Mike Armstrong]

The only accounts mentioned I can find, either in AD or local to Unity 
(4.0(4)), are:

EAdmin<systemid>
Unity_<servername>

Am I in trouble, or just looking in all the wrong places?

Mike Armstrong
UF/IFAS CREC
Lake Alfred, FL

-----Original Message-----

Date: Wed, 15 Dec 2004 10:01:02 -0800
From: "Voll, Scott" <Scott.Voll at wesd.org>
Subject: [cisco-voip] FW: [c-nsp] Cisco Security Advisory: Cisco Unity
Integrated withExchange Has Default Passwords
To: <cisco-voip at puck.nether.net>
Message-ID: <D713462ED535184D830F6F6301753E7E010E7C1A at VISHNU.wesd.org>
Content-Type: text/plain; charset="us-ascii"

Did everyone see this?

I'm I to understand that I can just disable all the accounts as my
workaround?

Scott

-----Original Message-----
From: cisco-nsp-bounces at puck.nether.net
[mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of Cisco Systems
Product Security Incident Response Team
Sent: Wednesday, December 15, 2004 8:45 AM
To: cisco-nsp at puck.nether.net
Cc: psirt at cisco.com


>>>snip<<<

Workarounds
===========

It is recommended to change to a strong password for all accounts
created by Cisco Unity.

The accounts that are created automatically when Cisco Unity is
integrated with Microsoft Exchange are: (replacing <servername> with
that of the particular Unity server, and <systemid> with that of your
particular system id)

EAdmin<systemid>
Unity_<servername>
UAMIS_<servername>
UOMNI_<servername>
UVPIM_<servername>
ESubscriber

>>>snip<<<