OT: Cisco.com password reset.

Wed Aug 3 14:35:55 UTC 2005

We began having this problem yesterday for about 30+ accounts. Some 
passwords weren't changed, some were, and some users received a response 
that they weren't valid users.. This is the response I received from Cisco..

A third-party security research organization has brought to our 
attention an issue in a Cisco.com search tool that could expose 
passwords for registered users. Cisco.com registered users consists of 
employees, customers, partners, and other third-party users.

In order to protect our registered Cisco.com users, we’re taking the 
proactive step of resetting Cisco.com passwords and instructing users to 
contact CCO-locksmith to receive a new password. Users who attempt to 
access the site in the meantime will receive a “failed log-in” message 
with instructions on how to reset their password.

The password reset process will take place between midnight and close of 
business U.S. Pacific time on August 2. Once the reset process is 
finished, I’d ask that you reach out to your customers and partners and 
make sure they have visited the Cisco.com site and reset their passwords.

We’re investigating the incident, and will work with outside agencies as 
appropriate. The incident does not appear to be due to a weakness in our 
security products and technologies or with our network infrastructure.

Thanks in advance for proactively reaching out to our customers and 
partners and walking them through the minor inconvenience of resetting 
their Cisco.com passwords.

Church, Chuck wrote:

>I eventually got an email stating it couldn't associate my email address
>with an active CCO ID.  I'm guessing their system is getting backed up
>because it's affecting lots of people.  Next step:
>
>"Please email cco-team at cisco.com to have your correct email address
>associated 
>with your User ID. To ensure you receive prompt attention, please
>provide 
>all of the following details:
>
>  1 Maintenance contract or Account number you used in your registration
>  2 The user ID your believe you have
>  3 Full name
>  4 Company name 
>"
>
>
>Chuck Church
>Lead Design Engineer
>CCIE #8776, MCNE, MCSE
>Netco Government Services - Design & Implementation
>1210 N. Parker Rd.
>Greenville, SC 29609
>Home office: 864-335-9473
>Cell: 703-819-3495
>cchurch at netcogov.com
>PGP key: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x4371A48D
>
>
>-----Original Message-----
>From: owner-nanog at merit.edu [mailto:owner-nanog at merit.edu] On Behalf Of
>Mike Tancsa
>Sent: Wednesday, August 03, 2005 9:52 AM
>To: Dan Armstrong
>Cc: nanog at merit.edu
>Subject: Re: OT: Cisco.com password reset.
>
>
>
>Same here. I didnt get a notice that it was reset, but I cannot login
>
>         ---Mike
>
>At 09:30 AM 03/08/2005, Dan Armstrong wrote:
>
>  
>
>>My PW to CCO did not work this morning either.  I am on hold with the
>>    
>>
>TAC 
>  
>
>>right now....
>>
>>
>>
>>Joe Blanchard wrote:
>>
>>    
>>
>>>FYI
>>>I got an email that my CCO account's password was reset
>>>last night. Not sure how widespread this issue was, but
>>>I called my account contact and verified that this is
>>>a valid email, and that my password needed to be reset.
>>>
>>>Just a heads up.
>>>
>>>-Joe Blanchard
>>>
>>>
>>>
>>>      
>>>
>
>
>  
>

-- 
------------------------------------------------------
Tom Sands			  				
Chief Network Engineer				
Rackspace Managed Hosting	    	       
(210)447-4065		   	
------------------------------------------------------