Accton-based switches (3com / Dell / SMC / Foundry / EdgeCore) - Backdoor Password

On the 15th of august 2009, at the HAR2009 conference, the existence of a backdoor password in Accton-based switches was revealed by Edwin Eefting, Erik Smit and Erwin Drent 12. Even though this is a 365-day exploit, it does not seem to be listed in any of the vulnerability databases. Also, I cou...

Accton-based switches (3com, Dell, SMC, Foundry, EdgeCore) Backdoor

Exploit for windows platform in category remote exploits =================================================================== Accton-based switches 3com, Dell, SMC, Foundry, EdgeCore Backdoor =================================================================== On the 15th of august 2009, at the...

3Com Intelligent Management Center multiple security vulnerabilities

Directory traversal, crossite scripting...

PR10-02: Various XSS and information disclosure flaws within 3Com* iMC (Intelligent Management Center)

PR10-02: Various XSS and information disclosure flaws within 3Com iMC Intelligent Management Center On the 12th April 2010 Hewlett Packard completed its acquisition of 3Com Vulnerability found: 29th January 2010 Vendor informed: 1st February 2010 Vulnerability fixed: 13th May 2010 Severity:...

PR10-01: Unauthenticated File Retrieval (traversal) within 3Com* iMC (Intelligent Management Center)

PR10-01: Unauthenticated File Retrieval traversal within 3Com iMC Intelligent Management Center On the 12th April 2010 Hewlett Packard completed its acquisition of 3Com Vulnerability found: 30th January 2010 Vendor informed: 1st February 2010 Vulnerability fixed: 13th May 2010 Severity: High...

Cross site scripting

Cross-site scripting XSS vulnerability in axis2-admin/axis2-admin/engagingglobally in the administration console in Apache Axis2/Java 1.4.1, 1.5.1, and possibly other versions, as used in SAP Business Objects 12, 3com IMC, and possibly other products, allows remote attackers to inject arbitrary w...

CVE-2010-2103

Cross-site scripting XSS vulnerability in axis2-admin/axis2-admin/engagingglobally in the administration console in Apache Axis2/Java 1.4.1, 1.5.1, and possibly other versions, as used in SAP Business Objects 12, 3com IMC, and possibly other products, allows remote attackers to inject arbitrary w...

CVE-2010-2103

CVE-2010-2103: Apache Axis2/Java Axis2 administration console (axis2-admin/engagingglobally) is vulnerable to cross-site scripting via the modules parameter. Affected: Axis2/Java 1.4.1, 1.5.1 (and possibly other versions) used in SAP Business Objects 12, 3Com IMC, etc. The vulnerability is due to...

CVE-2010-2103

Cross-site scripting XSS vulnerability in axis2-admin/axis2-admin/engagingglobally in the administration console in Apache Axis2/Java 1.4.1, 1.5.1, and possibly other versions, as used in SAP Business Objects 12, 3com IMC, and possibly other products, allows remote attackers to inject arbitrary w...

3Com* iMC (Intelligent Management Center) Unauthenticated File Retrieval

Exploit for windows platform in category web applications ==================================================================================== 3Com iMC Intelligent Management Center Unauthenticated File Retrieval traversal...

3Com* iMC (Intelligent Management Center) Various XSS

Exploit for windows platform in category web applications ====================================================================================== 3Com iMC Intelligent Management Center Various XSS and Information Disclosure Flaws...

3Com* iMC (Intelligent Management Center) - Traversal File Retrieval

3Com iMC Intelligent Management Center - Traversal File Retrieval PR10-01: Unauthenticated File Retrieval traversal within 3Com iMC Intelligent Management Center On the 12th April 2010 Hewlett Packard completed its acquisition of 3Com Vulnerability found: 30th January 2010 Vendor informed: 1st...

ProCheckUp Security Advisory 2010.1

PR10-01: Unauthenticated File Retrieval traversal within 3Com iMC Intelligent Management Center On the 12th April 2010 Hewlett Packard completed its acquisition of 3Com Vulnerability found: 30th January 2010 Vendor informed: 1st February 2010 Vulnerability fixed: 13th May 2010 Severity: High...

3Com* iMC (Intelligent Management Center) - Cross-Site Scripting / Information Disclosure Flaws

PR10-02: Various XSS and information disclosure flaws within 3Com iMC Intelligent Management Center On the 12th April 2010 Hewlett Packard completed its acquisition of 3Com Vulnerability found: 29th January 2010 Vendor informed: 1st February 2010 Vulnerability fixed: 13th May 2010 Severity:...

3Com* iMC (Intelligent Management Center) - Traversal File Retrieval

PR10-01: Unauthenticated File Retrieval traversal within 3Com iMC Intelligent Management Center On the 12th April 2010 Hewlett Packard completed its acquisition of 3Com Vulnerability found: 30th January 2010 Vendor informed: 1st February 2010 Vulnerability fixed: 13th May 2010 Severity: High...

ProCheckUp Security Advisory 2010.2

PR10-02: Various XSS and information disclosure flaws within 3Com iMC Intelligent Management Center On the 12th April 2010 Hewlett Packard completed its acquisition of 3Com Vulnerability found: 29th January 2010 Vendor informed: 1st February 2010 Vulnerability fixed: 13th May 2010 Severity:...

OS Identification : SNMP sysObjectID

The remote operating system can be identified by querying its sysObjectID object using SNMP. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid44344; scriptversion"1.28"; scriptsetattributeattribute:"pluginmodificationdate", value:"2020/04/09"; scriptnameenglish:"OS...

3Com OfficeConnect Content-Type Denial Of Service

Model - Tested on 3Com OfficeConnect ADSL Wireless 11g Firewall Router 3CRWDR100A-72 and 3CRWDR100Y-72 Software Version - Tested on 2.06T13 Apr 2007, last version for these routers Attacker - Tested from GNU/Linux Sidux and Ubuntu and Windows 7 Exploit languaje - Ruby Type - Remote Denial of...

3Com OfficeConnect Routers DoS (Content-Type)

No description provided by source. Model - Tested on 3Com OfficeConnect ADSL Wireless 11g Firewall Router 3CRWDR100A-72 and 3CRWDR100Y-72 Software Version - Tested on 2.06T13 Apr 2007, last version for these routers Attacker - Tested from GNU/Linux Sidux and Ubuntu and Windows 7 Exploit languaje ...

3Com OfficeConnect Denial Of Service

Model - Tested on 3Com OfficeConnect ADSL Wireless 11g Firewall Router 3CRWDR100A-72 and 3CRWDR100Y-72 Software Version - Tested on 2.06T13 Apr 2007, last version for these routers Attacker - Tested from GNU/Linux Sidux and Ubuntu Exploit languaje - Ruby Type - Remote Denial of Service Exploit by...