CVE-2008-7165: Cross-Site Request Forgery (CSRF)

Cross-site request forgery in cp06wifimnocifr.cgi in the administrator panel in TELECOM ITALIA Alice Gate2 Plus Wi-Fi allows remote attackers to hijack the authentication of administrators for requests that disable Wi-Fi encryption via certain values for the wlChannel and wlRadioEnable parameters...

Alice Gate2 Arbitrary Port Forward

w00tZ0ne.org Mattia 'RingZero' Paccamiccio @ w00tZ0ne.org...

Telecom Italia Alice路由器IP报文非授权访问漏洞

BUGTRAQ ID: 31754 Telecom Italia是意大利最重要的ISP，提供名为Alice的ADSL服务。 如果内网用户向Alice路由器发送了如下IP报文的话： 1 IP协议号255 2 8字节负载大小 3 负载为br0设备MAC地址的MD5数据变形后的前8个字节 4 这些modem中br0拥有相同的eth0 mac 就可以激活路由器的管理接口和telnet/ftp/tftp服务，获得非授权访问。 Telecom Italia AGA/AGB/AG2P-AG3/AGPV-AGPF Telecom Italia --------------...

Telecom Italia Alice Pirelli routers Backdoor from internal LAN/WAN

No description provided by source. saxdax & drpepperONE Discovered embedded backdoor to activate telnet/ftp/tftp/web extended admin interface with Admin privileges, from internal network lan on Alice ADSL CPE Modem/Router, manufactered by Pirelli based on Broadcom platform. saxdax & drpepperONE...

Telecom Italia Alice Pirelli routers - Backdoor from internal LAN/WAN

saxdax & drpepperONE Discovered embedded backdoor to activate telnet/ftp/tftp/web extended admin interface with Admin privileges, from internal network lan on Alice ADSL CPE Modem/Router, manufactered by Pirelli based on Broadcom platform. saxdax & drpepperONE Router Vendor: Alice Telecom Italia...

Telecom Italia Alice Pirelli routers Backdoor from internal LAN/WAN

Exploit for hardware platform in category remote exploits =================================================================== Telecom Italia Alice Pirelli routers Backdoor from internal LAN/WAN =================================================================== saxdax & drpepperONE Discovered...

Telecom Italia Alice Pirelli routers backdoor

Specially constructed IP packet causes router's telnet/ftp/tftp functions to be activated...

Telecom Italia Alice Pirelli routers backdoor discoverd to activate telnet/ftp/tftp from internal LAN/WLAN.

saxdax & drpepperONE Discovered embedded backdoor to activate telnet/ftp/tftp/web extended admin interface with Admin privileges, from internal network lan on Alice ADSL CPE Modem/Router, manufactered by Pirelli based on Broadcom platform. saxdax & drpepperONE Router Vendor: Alice Telecom Italia...

C6 Messenger - ActiveX Remote Download and Execute

!-- C6 Messenger Installation Url DownloaderActiveX Control Remote Download & Execute Exploit by Nine:Situations:Group::SnoopyAssault site: http://retrogod.altervista.org/ "C6 Messenger is an instant messaging program produced by Telecom Italia Group, specifically by Alice distribution, Icon Spa...

CVE-2008-1269: Improper Authentication

cp06wifimnocifr.cgi in the admin panel on the Alice Gate 2 Plus Wi-Fi router does not verify authentication credentials, which allows remote attackers to disable Wi-Fi encryption via a certain request...

Alice Gate2 Plus Wi-Fi Router - Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/27374/info Alice Gate2 Plus Wi-Fi routers are prone to a cross-site request-forgery vulnerability. An attacker can exploit this issue to alter administrative configuration on affected devices. Specifically, altering the wireless encryption settings on...

Flaw in Alice gate2 pluswifi adsl modem

Discovered by WarGame/DoomRiderz HomePage: http://vx.netlux.org/wargamevx mail addr: [email protected] Vulnerable device: Alice gate 2 plus wifi Vendor's page: http://aiuto.alice.it/informazioni/modemadsl/alicegate2adv.html It seems to be possible to disable the wifi encryption using the followi...

Alice Gate2 Plus Wi-Fi Router - Cross-Site Request Forgery

Alice Gate2 Plus Wi-Fi Router - Cross-Site Request Forgery source: https://www.securityfocus.com/bid/27374/info Alice Gate2 Plus Wi-Fi routers are prone to a cross-site request-forgery vulnerability. An attacker can exploit this issue to alter administrative configuration on affected devices...

Design/Logic Flaw

The HPRevolutionRegistryManager ActiveX control in Hp.Revolution.RegistryManager.dll 1 in Telecom Italy Alice Messenger allows remote attackers to create registry keys and values via the arguments to the WriteRegistry method...

CVE-2007-4740

The HPRevolutionRegistryManager ActiveX control in Hp.Revolution.RegistryManager.dll 1 in Telecom Italy Alice Messenger allows remote attackers to create registry keys and values via the arguments to the WriteRegistry method...

CVE-2007-4740

The vulnerability CVE-2007-4740 affects the HPRevolutionRegistryManager ActiveX control in Hp.Revolution.RegistryManager.dll 1 used by Telecom Italia Alice Messenger. The issue allows a remote attacker to create registry keys and values by supplying arguments to the WriteRegistry method, exposing...

CVE-2007-4740: Undefined Security Weakness

The HPRevolutionRegistryManager ActiveX control in Hp.Revolution.RegistryManager.dll 1 in Telecom Italy Alice Messenger allows remote attackers to create registry keys and values via the arguments to the WriteRegistry method...

telecomitaly-reg.txt

group="HKEYLOCALMACHINE" section="SOFTWARE\Microsoft\Windows\CurrentVersion\Run" key="sun-tzu" valType=1 'REGSZ value="""c:\windows\system32\cmd.exe"" /c net user sun tzu /add & net localgroup Administrators sun /add & sc config SharedAccess start= disabled & net stop SharedAccess & sc config...

Telecom Italy Alice Messenger Remote registry key manipulation Exploit

No description provided by source. !-- 04.50 20/08/2007 Telecom Italy Alice Messenger Hp.Revolution.RegistryManager.dll v.1 remote arbitrary registry key manipulation I mean this one: http://aiuto.alice.it/offerte/messenger/installazione.html this was 0day for a while, but ... who knows? the new...

Telecom Italy Alice Messenger - Remote Registry Key Manipulation

Telecom Italy Alice Messenger - Remote Registry Key Manipulation group="HKEYLOCALMACHINE" section="SOFTWARE\Microsoft\Windows\CurrentVersion\Run" key="sun-tzu" valType=1 'REGSZ value="""c:\windows\system32\cmd.exe"" /c net user sun tzu /add & net localgroup Administrators sun /add & sc config...