Default configuration

AdventNet EventLog Analyzer build 4030 for Windows, and possibly other versions and platforms, installs a mysql instance with a default "root" account without a password, which allows remote attackers to gain privileges and modify logs. Fixed in EventLog Analyzer Build 6000...

CVE-2007-6081

AdventNet EventLog Analyzer build 4030 for Windows, and possibly other versions and platforms, installs a mysql instance with a default "root" account without a password, which allows remote attackers to gain privileges and modify logs. Fixed in EventLog Analyzer Build 6000...

CVE-2007-6000

CVE-2007-6000 affects KDE Konqueror up to version 3.5.6, allowing remote attackers to trigger a denial of service (crash) by sending large HTTP cookie parameters. Affected software: Konqueror (KDE desktop) prior to 3.5.7(?) with reliance on cookie handling. Root cause details are not extensively ...

Default credentials

The IBM TotalStorage DS400 with firmware 4.15 uses a blank password for the 1 root, 2 user, 3 manager, 4 administrator, and 5 operator accounts, which allows remote attackers to gain login access via certain Linux daemons, including a telnet daemon on a nonstandard port, tcp/6000...

CVE-2007-3232

The IBM TotalStorage DS400 with firmware 4.15 uses a blank password for the 1 root, 2 user, 3 manager, 4 administrator, and 5 operator accounts, which allows remote attackers to gain login access via certain Linux daemons, including a telnet daemon on a nonstandard port, tcp/6000...

CVE-2007-3232

The IBM TotalStorage DS400 with firmware 4.15 uses a blank password for the 1 root, 2 user, 3 manager, 4 administrator, and 5 operator accounts, which allows remote attackers to gain login access via certain Linux daemons, including a telnet daemon on a nonstandard port, tcp/6000...

CVE-2007-3232: Undefined Security Weakness

The IBM TotalStorage DS400 with firmware 4.15 uses a blank password for the 1 root, 2 user, 3 manager, 4 administrator, and 5 operator accounts, which allows remote attackers to gain login access via certain Linux daemons, including a telnet daemon on a nonstandard port, tcp/6000...

Code injection

Unspecified vulnerability in Cisco IOS 12.2SXA, SXB, SXD, and SXF; and the MSFC2, MSFC2a and MSFC3 running in Hybrid Mode on Cisco Catalyst 6000, 6500 and Cisco 7600 series systems; allows remote attackers on a local network segment to cause a denial of service software reload via a certain MPLS...

CVE-2007-1257

The Network Analysis Module NAM in Cisco Catalyst Series 6000, 6500, and 7600 allows remote attackers to execute arbitrary commands via certain SNMP packets that are spoofed from the NAM's own IP address...

CVE-2007-1258: Undefined Security Weakness

Unspecified vulnerability in Cisco IOS 12.2SXA, SXB, SXD, and SXF; and the MSFC2, MSFC2a and MSFC3 running in Hybrid Mode on Cisco Catalyst 6000, 6500 and Cisco 7600 series systems; allows remote attackers on a local network segment to cause a denial of service software reload via a certain MPLS...

CVE-2007-1257: Improper Input Validation

The Network Analysis Module NAM in Cisco Catalyst Series 6000, 6500, and 7600 allows remote attackers to execute arbitrary commands via certain SNMP packets that are spoofed from the NAM's own IP address...

Cisco Security Advisory: Cisco Catalyst 6000, 6500 Series and Cisco 7600 Series NAM (Network Analysis Module) Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Catalyst 6000, 6500 Series and Cisco 7600 Series NAM Network Analysis Module Vulnerability Advisory ID: cisco-sa-20070228-nam Revision 1.0 For Public Release 2007 February 28 -...

CVE-2007-0932: Undefined Security Weakness

The 1 Aruba Mobility Controllers 200, 600, 2400, and 6000 and 2 Alcatel-Lucent OmniAccess Wireless 43xx and 6000 do not properly implement authentication and privilege assignment for the guest account, which allows remote attackers to access administrative interfaces or the WLAN...

[KAPDA]::Security analysis of cutenews 1.4.5

Product: cutenews 1.4.5 Vendor: http://cutephp.com The Results through security analysis of cutenews 1.4.5 provided by KAPDA.ir -------------------------------------------------- Test plan: Manual penetration testing: YES Using automated tools: NO Code Auditing: YES Statistical Results from...

CVE-2001-1520

The provided connected records confirm that CVE-2001-1520 affects the Xircom REX 6000 PDA, where local users can obtain the 10‑digit PIN by starting a serial monitor, connecting via Rextools, and capturing the cleartext PIN. The root cause centers on exposing the PIN through local serial access; ...

CVE-2001-1520

Xircom REX 6000 allows local users to obtain the 10 digit PIN by starting a serial monitor, connecting to the personal digital assistant PDA via Rextools, and capturing the cleartext PIN...

CVE-2001-1520: Undefined Security Weakness

Xircom REX 6000 allows local users to obtain the 10 digit PIN by starting a serial monitor, connecting to the personal digital assistant PDA via Rextools, and capturing the cleartext PIN...

AIX 5.1/5.2/5.3 local root exploits

hi, i found some local security holes in IBM's AIX versions 5.1, 5.2 and 5.3 unix for IBM RS/6000 powerpc. 1 the first is a bug in all setuid diag related tools that use an environment variable as a prefix to an external binary executed as root. 2 the second is a classical stack overflow in a too...

Cisco 6000/6500/7600 series systems fail to properly process layer 2 frames

Overview Cisco 6000/6500/7600 series systems with Multilayer Switch Feature Card 2 MSFC2 fail to properly process layer 2 frames. Description Cisco 6000/6500/7600 series systems with MSFC2 contain a vulnerability in the way layer 2 frames are processed in software. By sending a specially crafted...

CVE-2004-0244

Cisco 6000/6500/7600 series systems with Multilayer Switch Feature Card 2 (MSFC2) and a FlexWAN or Optical Services Module (OSM) are affected by a crafted layer-2 frame vulnerability. A layer-2 frame that encapsulates a layer-3 packet with inconsistent length can cause the device to freeze or res...