Improper Authentication Mechanism in 3Com Wireless8760 Dual Radio 11a/b/g Poe Access Point

Hi My name is Yossi Yakubov and i am a security researcher. Recently me and my collegues found the following vulnerability in the 3Com Wireless8760 web administration interface: If one user is authenticated to the web interface, other users can access to internal pages without further...

CVE-2008-6395

The web management interface in 3Com Wireless 8760 Dual Radio 11a/b/g PoE Access Point allows remote attackers to cause a denial of service device crash via a malformed HTTP POST request...

Cross site request forgery (csrf)

The web management interface in 3Com Wireless 8760 Dual Radio 11a/b/g PoE Access Point allows remote attackers to cause a denial of service device crash via a malformed HTTP POST request...

CVE-2008-6395

CVE-2008-6395 affects the web management interface of the 3Com Wireless 8760 Dual Radio 11a/b/g PoE Access Point. A remote attacker can trigger a denial of service (device crash) by sending a malformed HTTP POST request. The available documents identify the affected product and impact but do not ...

CVE-2008-6395

The web management interface in 3Com Wireless 8760 Dual Radio 11a/b/g PoE Access Point allows remote attackers to cause a denial of service device crash via a malformed HTTP POST request...

CVE-2008-6395: Use of Externally-Controlled Format String

The web management interface in 3Com Wireless 8760 Dual Radio 11a/b/g PoE Access Point allows remote attackers to cause a denial of service device crash via a malformed HTTP POST request...

3Com OfficeConnect Wireless Cable/DSL路由器SaveCfgFile绕过认证漏洞

BUGTRAQ ID: 33686 3Com OfficeConnect Wireless Cable/DSL是一款小型的无线路由器。 OfficeConnect Wireless Cable/DSL路由器默认启用了一个Web控制台以便于设备管理。即使http守护程序不允许未经认证便访问HTML页面和Web控制台，仍可以调用并执行已有的CGI程序。System Tools--Configuration--Backup Configuration功能将实际的配置文件保存到了名为config.bin的纯文本文件中，未经认证的用户可以直接调用SaveCfgFile...

3Com OfficeConnect Wireless Cable/DSL Router Authentication Bypass

==================================================== Security Research Advisory Vulnerability name: "3Com OfficeConnect Wireless Cable/DSL Router Authentication Bypass" Advisory number: LC-2008-05 Advisory URL: http://www.ikkisoft.com ==================================================== 1 Affecte...

3COM OfficeConnect routers unauthroized access

Authentication bypass for web pages with sensitive information and device configuration...

3Com OfficeConnect Wireless Cable/DSL Router Authentication Bypass

No description provided by source. ==================================================== 3Com OfficeConnect Wireless Cable/DSL Router Authentication Bypass Original Advisory: http://www.ikkisoft.com/stuff/LC-2008-05.txt luca.carettoniatikkisoftdotcom...

3Com OfficeConnect Wireless Cable/DSL Router - Authentication Bypass

==================================================== 3Com OfficeConnect Wireless Cable/DSL Router Authentication Bypass Original Advisory: http://www.ikkisoft.com/stuff/LC-2008-05.txt luca.carettoniatikkisoftdotcom ==================================================== An unauthenticated user may...

3Com Router Authentication Bypass

==================================================== Security Research Advisory Vulnerability name: "3Com OfficeConnect Wireless Cable/DSL Router Authentication Bypass" Advisory number: LC-2008-05 Advisory URL: http://www.ikkisoft.com ==================================================== 1 Affecte...

3Com OfficeConnect Wireless Cable/DSL Router Authentication Bypass

Exploit for hardware platform in category remote exploits ================================================================== 3Com OfficeConnect Wireless Cable/DSL Router Authentication Bypass ================================================================== Original Advisory:...

3Com OfficeConnect Wireless CableDSL Router - Authentication Bypass

3Com OfficeConnect Wireless CableDSL Router - Authentication Bypass ==================================================== 3Com OfficeConnect Wireless Cable/DSL Router Authentication Bypass Original Advisory: http://www.ikkisoft.com/stuff/LC-2008-05.txt luca.carettoniatikkisoftdotcom...

3COM Netbuilder Default Password (deprecated)

Binary data 4821.prm...

3Com Shark Fin Comcast-supplied Default Password (deprecated)

Binary data 4824.prm...

3COM CellPlex Default Password (deprecated)

Binary data 4820.prm...

3COM TFTP Buffer Overflow

!/usr/bin/perl 3comtftpbof.pl Jeremy Brown [email protected]/jbrownsec.blogspot.com Easily owns ancient 3CTftpSvc.zip Now how about a time machine and axx to 3com internal networks! use IO::Socket; $win2ksp4 = 0x77E43292; user32.dll JMP ESI $winxpsp3 = 0x7E485184; user32.dll JMP ESI $test1234 ...

3Com AP 8760绕过认证、泄露口令及SNMP注入漏洞

BUGTRAQ ID: 32358 3Com Wireless 8760 Dual-Radio 11a/b/g PoE是适用于各种类型企业的无线接入路由器。 3Com AP 8760的HTTP认证机制如下： 1. 路由器检查用户提交的凭据是否有效。 2. 如果有效，路由器的Web界面将用户重新定向到仅有通过认证的管理用户才可以使用的URL。...

PR07-40: Authentication Bypass, Passwords Leakage and SNMP Injection on 3Com AP 8760

PR07-40: Authentication Bypass, Passwords Leakage and SNMP Injection on 3Com AP 8760 Vulnerability Found: 6th November 2007 Vendor Informed: 2nd May 2008 Date Public: 14th November 2008 Severity: Medium Credits: Adrian Pastor of ProCheckUp Ltd www.procheckup.com. Vulnerability 1: Description: The...