447 matches found
3Com OfficeConnect Command Execution
Product: 3Com OfficeConnect Firewall/Router Website: http://www.3com.com/ Discovered By: Andrea Fabrizi Email: [email protected] Web: http://www.andreafabrizi.it Vuln: remote command execution and password disclosure Admin password disclosure 1 SSH/Telnet to router using one of these hidde...
3Com OfficeConnect Firewall/Router multiple remote Vulnerabilities
Product: 3Com OfficeConnect Firewall/Router Website: http://www.3com.com/ Discovered By: Andrea Fabrizi Email: [email protected] Web: http://www.andreafabrizi.it Vuln: remote command execution and password disclosure Admin password disclosure 1 SSH/Telnet to router using one of these hidde...
3Com OfficeConnect - Code Execution
3Com OfficeConnect - Code Execution Remote command execution http://1.2.3.4/utility.cgi?testType=1&IP=aaa || cat /etc/passwd To see the command output you need to log into the router, however the command is executed even the user is not logged in, so if you don't have access to the device a DOS i...
3COM OfficeConnect routers multiple security vulnerabilities
Backdoor accounts, password stored in clear text, code execution...
Improper Authentication Mechanism in 3Com Wireless8760 Dual Radio 11a/b/g Poe Access Point
Hi My name is Yossi Yakubov and i am a security researcher. Recently me and my collegues found the following vulnerability in the 3Com Wireless8760 web administration interface: If one user is authenticated to the web interface, other users can access to internal pages without further...
CVE-2008-6395
The web management interface in 3Com Wireless 8760 Dual Radio 11a/b/g PoE Access Point allows remote attackers to cause a denial of service device crash via a malformed HTTP POST request...
Cross site request forgery (csrf)
The web management interface in 3Com Wireless 8760 Dual Radio 11a/b/g PoE Access Point allows remote attackers to cause a denial of service device crash via a malformed HTTP POST request...
CVE-2008-6395
CVE-2008-6395 affects the web management interface of the 3Com Wireless 8760 Dual Radio 11a/b/g PoE Access Point. A remote attacker can trigger a denial of service (device crash) by sending a malformed HTTP POST request. The available documents identify the affected product and impact but do not ...
CVE-2008-6395
The web management interface in 3Com Wireless 8760 Dual Radio 11a/b/g PoE Access Point allows remote attackers to cause a denial of service device crash via a malformed HTTP POST request...
CVE-2008-6395: Use of Externally-Controlled Format String
The web management interface in 3Com Wireless 8760 Dual Radio 11a/b/g PoE Access Point allows remote attackers to cause a denial of service device crash via a malformed HTTP POST request...
3Com OfficeConnect Wireless Cable/DSL路由器SaveCfgFile绕过认证漏洞
BUGTRAQ ID: 33686 3Com OfficeConnect Wireless Cable/DSL是一款小型的无线路由器。 OfficeConnect Wireless Cable/DSL路由器默认启用了一个Web控制台以便于设备管理。即使http守护程序不允许未经认证便访问HTML页面和Web控制台，仍可以调用并执行已有的CGI程序。System Tools--Configuration--Backup Configuration功能将实际的配置文件保存到了名为config.bin的纯文本文件中，未经认证的用户可以直接调用SaveCfgFile...
3COM OfficeConnect routers unauthroized access
Authentication bypass for web pages with sensitive information and device configuration...
3Com OfficeConnect Wireless Cable/DSL Router Authentication Bypass
No description provided by source. ==================================================== 3Com OfficeConnect Wireless Cable/DSL Router Authentication Bypass Original Advisory: http://www.ikkisoft.com/stuff/LC-2008-05.txt luca.carettoniatikkisoftdotcom...
3Com OfficeConnect Wireless Cable/DSL Router Authentication Bypass
==================================================== Security Research Advisory Vulnerability name: "3Com OfficeConnect Wireless Cable/DSL Router Authentication Bypass" Advisory number: LC-2008-05 Advisory URL: http://www.ikkisoft.com ==================================================== 1 Affecte...
3Com OfficeConnect Wireless Cable/DSL Router Authentication Bypass
Exploit for hardware platform in category remote exploits ================================================================== 3Com OfficeConnect Wireless Cable/DSL Router Authentication Bypass ================================================================== Original Advisory:...
3Com OfficeConnect Wireless CableDSL Router - Authentication Bypass
3Com OfficeConnect Wireless CableDSL Router - Authentication Bypass ==================================================== 3Com OfficeConnect Wireless Cable/DSL Router Authentication Bypass Original Advisory: http://www.ikkisoft.com/stuff/LC-2008-05.txt luca.carettoniatikkisoftdotcom...
3Com Router Authentication Bypass
==================================================== Security Research Advisory Vulnerability name: "3Com OfficeConnect Wireless Cable/DSL Router Authentication Bypass" Advisory number: LC-2008-05 Advisory URL: http://www.ikkisoft.com ==================================================== 1 Affecte...
3Com OfficeConnect Wireless Cable/DSL Router - Authentication Bypass
==================================================== 3Com OfficeConnect Wireless Cable/DSL Router Authentication Bypass Original Advisory: http://www.ikkisoft.com/stuff/LC-2008-05.txt luca.carettoniatikkisoftdotcom ==================================================== An unauthenticated user may...
