IRCXPro Default Admin Password

2003-06-03T00:00:00
ID IRCXPRO_DEFAULT_ADMIN_PASSWORD.NASL
Type nessus
Reporter This script is Copyright (C) 2003-2021 Tenable Network Security, Inc.
Modified 2021-01-19T00:00:00

Description

The remote web server is running IRCXPro.

It is possible to connect to the management port of this service (by default : 7100) by using the default login / password combination admin / password.

An attacker may use this flaw to gain the control of this server.

                                        
                                            #%NASL_MIN_LEVEL 70300
#
# (C) Tenable Network Security, Inc.
#

#
#Ref:
# From: "morning_wood" <se_cur_ity@hotmail.com>
# To: <bugtraq@securityfocus.com>
# Subject: IRCXpro 1.0 - Clear local and default remote admin passwords
# Date: Tue, 3 Jun 2003 00:57:45 -0700

include('deprecated_nasl_level.inc');
include('compat.inc');

if (description)
{
 script_id(11697);
 script_version("1.12");
 script_set_attribute(attribute:"plugin_modification_date", value:"2021/01/19");

 script_name(english:"IRCXPro Default Admin Password");
 script_summary(english:"Logs into the remote administrative interface of ircxpro");

 script_set_attribute(attribute:"synopsis", value:
"The remote web server contains a management interface using a default
username / password combination.");
 script_set_attribute(attribute:"description", value:
"The remote web server is running IRCXPro.

It is possible to connect to the management port of this service (by
default : 7100) by using the default login / password combination admin
/ password. 

An attacker may use this flaw to gain the control of this server.");
 script_set_attribute(attribute:"solution", value:"Set a strong password for the admin user.");
 script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:N");
 script_set_cvss_temporal_vector("CVSS2#E:H/RL:ND/RC:ND");

 script_set_attribute(attribute:"plugin_publication_date", value:"2003/06/03");

 script_set_attribute(attribute:"plugin_type", value:"remote");
 script_end_attributes();

 script_category(ACT_GATHER_INFO);
 script_copyright(english:"This script is Copyright (C) 2003-2021 Tenable Network Security, Inc.");
 script_family(english:"CGI abuses");

 script_dependencies("find_service1.nasl");
 script_exclude_keys("global_settings/supplied_logins_only");
 script_require_ports("Services/ircxpro_admin", 7100);
 exit(0);
}

include("audit.inc");
include("global_settings.inc");
include("misc_func.inc");

port = get_service(svc:"ircxpro_admin", default:7100, exit_on_fail:TRUE);

if (supplied_logins_only) audit(AUDIT_SUPPLIED_LOGINS_ONLY);

soc = open_sock_tcp(port);
if (!soc) audit(AUDIT_SOCK_FAIL, port);

r = recv_line(socket:soc, length:4096);
if('IRCXPRO' >!< r) exit(0);

r = recv_line(socket:soc, length:4096);

send(socket:soc, data:'ISIRCXPRO\r\n');
r = recv_line(socket:soc, length:4096);
if ('IRCXPRO' >!< r) exit(0);

send(socket:soc, data:'AUTH admin password\r\n');
r = recv_line(socket:soc, length:4096);
if ("WELCOME" >< r) security_warning(port);
else audit(AUDIT_LISTEN_NOT_VULN, "IRCXPro", port);