92 matches found
CVE-2002-1691
Alcatel OmniPCX 4400 installs known user accounts and passwords in the /etc/password file by default, which allows remote attackers to gain unauthorized access...
CVE-2002-1691
CVE-2002-1691 affects the Alcatel OmniPCX 4400. The vulnerability arises because known user accounts and passwords are installed in the /etc/password file by default, enabling remote attackers to gain unauthorized access. The available sources corroborate the default-credentials issue and the res...
CVE-2004-1483
The CVE covers multiple unknown vulnerabilities in the ActiveX and HTML file browsers of Symantec Clientless VPN Gateway 4400 Series 5.0. The description indicates unknown attack vectors and unknown impact; no details on root cause, affected versions beyond 5.0, exploits, or remediation are provi...
Alcatel PABX 4400 Detection
The remote host is an Alcatel PABX 4400. This device can be configured thru the serial port or using this port. Outsiders should not be able to connect to this device. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11019; scriptversion "1.14"; scriptcvsdate"Date:...
CVE-2002-0294
Alcatel 4400 installs the /chetc/shutdown command with setgid privileges, which allows many different local users to shut down the system...
CVE-2002-0293
The CVE-2002-0293 entry describes a Local Privilege Escalation in the Alcatel OmniPCX 4400 FTP service: the halt user can gain root privileges by modifying root's .profile. This yields full confidentiality, integrity, and availability impact as stated. The connected documents do not provide speci...
CVE-2002-0295
CVE-2002-0295 affects Alcatel OmniPCX 4400; the flaw is that setup installs files with world-writable permissions, enabling local users to reconfigure the system and potentially obtain privileges. Documented impact is local, with partial confidentiality/integrity/availability. No explicit exploit...
CVE-2002-0294
The CVE-2002-0294 entry concerns Alcatel 4400. The affected component is the /chetc/shutdown command which is installed with setgid privileges. The underlying issue is privilege escalation by assigning setgid to a program used for system shutdown, enabling local users to shut down the system (imp...
CVE-2002-0294
Alcatel 4400 installs the /chetc/shutdown command with setgid privileges, which allows many different local users to shut down the system...
CVE-2002-0293
FTP service in Alcatel OmniPCX 4400 allows the "halt" user to gain root privileges by modifying root's .profile file...
Security BugWare : Alcatel 4400 PBX hack
w w w . s e c u r i t y b u g w a r e . o r g A D V I S O R Y Playing around with ALCATEL 4400 PBX SYSTEM AFFECTED ================ Alcatel 4400 Pbx PROBLEM ======== A little audit of an Alcatel 4400 pbx leads us to some interesting bugs : default passwords, many root accesses, DoS, halt. If you...