CVE-2007-3283

The CVE-2007-3283 issue concerns GNOME XScreenSaver on Sun Solaris 8/9 where, if the root user is logged in at the console, the session does not auto-lock after inactivity, potentially allowing a nearby attacker to access the console. Connected Nessus patch entries for Solaris 10 x86/sparc refere...

CVE-2007-3283

GNOME XScreenSaver in Sun Solaris 8 and 9 before 20070417, when root is logged into the console, does not automatically lock the screen after a session has been inactive, which might allow physically proximate attackers to access the console...

screen password protection bypass

Some key sequences allow access to locked console...

PT-2007-2464 · Red Hat · Jboss

Name of the Vulnerable Software and Affected Versions: JBoss affected versions not specified Description: The default configuration of JBoss does not restrict access to the console and web management interfaces, allowing remote attackers to bypass authentication and gain administrative access...

CVE-2005-1726

The CoreGraphics Window Server in Mac OS X 10.4.1 allows local users with console access to gain privileges by "launching commands into root sessions."...

CVE-2005-1726

The CoreGraphics Window Server in Mac OS X 10.4.1 allows local users with console access to gain privileges by "launching commands into root sessions."...

fortinetBackdoor.txt

If you have console access to this box, you are able to get root access or more by using the Username: maintainer Password: pbcpbnhere should you type the serialnr. of the box, the characters should be in Capital letters. FortiOS: 2.x Regards Johan Andersson Atea Security, Sweden Phone: +46-709-1...

Backdoor in Fortinet's firewall Fortigate

If you have console access to this box, you are able to get root access or more by using the Username: maintainer Password: pbcpbnhere should you type the serialnr. of the box, the characters should be in Capital letters. FortiOS: 2.x Regards Johan Andersson Atea Security, Sweden Phone: +46-709-1...

CVE-2005-1837

Fortinet firewall running FortiOS 2.x contains a hardcoded username with the password set to the serial number, which allows local users with console access to gain privileges...

[NEWS] AlterPath Manager Information Multiple Vulnerabilities

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

CVE-2005-0541

consoleConnect.jsp in Cyclades AlterPath Manager APM Console Server 1.2.1 allows remote attackers to connect to arbitrary consoles by modifying the consolename parameter...

WebConnect Multiple Remote Vulnerabilities (deprecated)

Binary data 2639.prm...

[Full-Disclosure] NetWare Screensaver Authentication Bypass From The Local Console

Novacoast Security Advisory Novell Netware 5/5.1/6.0/6.5 Vulnerability Synopsis: Novacoast has discovered a vulnerability in the Novell NetWare Operating System screen saver software. The vulnerability allows a local attacker to bypass authentication and access the system console. Description: Th...

not_so_smartether.txt

There is a vulnerability within the OS that this and other samsung managed switches. The problem resides in the way that the admin user is authenticated when trying to login using telnet remote or from console local. Now just so everyone who reads this knows, I am not that up to date on all of...

ACER Travelmate 600 and 800 series - Smartcard flawed Implementation

Background ------------------- Acer Travelmate 600, 800 series notebooks include a smartcard reader, two smartcards and a security application called Platinum Secure. The smart card security system should prevent access to the console while the smartcard is not present or when password has not be...

CVE-2002-2093

The Video Control Panel on SGI O2/IRIX 6.5, when the Default Input is set to "Output Video", allows attackers to access a console session by running videoout then videoin...

CVE-2002-0883

Vulnerability in Compaq ProLiant BL e-Class Integrated Administrator 1.0 and 1.10, allows authenticated users with Telnet, SSH, or console access to conduct unauthorized activities...

CVE-2002-0883

The CVE-2002-0883 entry describes a vulnerability in Compaq ProLiant BL e-Class Integrated Administrator 1.0 and 1.10. Authenticated users with Telnet, SSH, or console access can perform unauthorized activities, with full impact on confidentiality, integrity, and availability per CVSS v2. No expl...

Проблемы в Avirt Gateway Suit (buffer overflow, unauthorized access)

Переполнение буфера при длинном HTTP-заголовке. Кроме того, telnet-прокси позволяет полный консольный доступ к системе...

CVE-2000-0668

CVE-2000-0668 affects the Linux pam_console PAM module when a display manager (gdm or kdm) has XDMCP enabled. The vulnerability allows a user to access the system console and reboot the system, with a Medium severity (CVSS v2 base score 5.0) and a Partial availability impact. The provided sources...