North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: OT: Cisco.com password reset.

  • From: Tom Sands
  • Date: Wed Aug 03 11:24:43 2005


We began having this problem yesterday for about 30+ accounts. Some passwords weren't changed, some were, and some users received a response that they weren't valid users.. This is the response I received from Cisco..


A third-party security research organization has brought to our attention an issue in a Cisco.com search tool that could expose passwords for registered users. Cisco.com registered users consists of employees, customers, partners, and other third-party users.

In order to protect our registered Cisco.com users, we’re taking the proactive step of resetting Cisco.com passwords and instructing users to contact CCO-locksmith to receive a new password. Users who attempt to access the site in the meantime will receive a “failed log-in” message with instructions on how to reset their password.

The password reset process will take place between midnight and close of business U.S. Pacific time on August 2. Once the reset process is finished, I’d ask that you reach out to your customers and partners and make sure they have visited the Cisco.com site and reset their passwords.

We’re investigating the incident, and will work with outside agencies as appropriate. The incident does not appear to be due to a weakness in our security products and technologies or with our network infrastructure.

Thanks in advance for proactively reaching out to our customers and partners and walking them through the minor inconvenience of resetting their Cisco.com passwords.


Church, Chuck wrote:

I eventually got an email stating it couldn't associate my email address
with an active CCO ID. I'm guessing their system is getting backed up
because it's affecting lots of people. Next step:

"Please email [email protected] to have your correct email address
associated with your User ID. To ensure you receive prompt attention, please
provide all of the following details:

1 Maintenance contract or Account number you used in your registration
2 The user ID your believe you have
3 Full name
4 Company name "


Chuck Church
Lead Design Engineer
CCIE #8776, MCNE, MCSE
Netco Government Services - Design & Implementation
1210 N. Parker Rd.
Greenville, SC 29609
Home office: 864-335-9473
Cell: 703-819-3495
[email protected]
PGP key: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x4371A48D


-----Original Message-----
From: [email protected] [mailto:[email protected]] On Behalf Of
Mike Tancsa
Sent: Wednesday, August 03, 2005 9:52 AM
To: Dan Armstrong
Cc: [email protected]
Subject: Re: OT: Cisco.com password reset.



Same here. I didnt get a notice that it was reset, but I cannot login

---Mike

At 09:30 AM 03/08/2005, Dan Armstrong wrote:


My PW to CCO did not work this morning either. I am on hold with the

TAC
right now....



Joe Blanchard wrote:


FYI
I got an email that my CCO account's password was reset
last night. Not sure how widespread this issue was, but
I called my account contact and verified that this is
a valid email, and that my password needed to be reset.

Just a heads up.

-Joe Blanchard






--
------------------------------------------------------
Tom Sands
Chief Network Engineer
Rackspace Managed Hosting (210)447-4065
------------------------------------------------------