CVE-2009-0620

Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers before A21.1 uses default 1 usernames and 2 passwords for a the administrator and b web management, which makes it easier for remote attackers to perform configuration changes or obtain operating-system access...

CVE-2009-0621

Cisco ACE 4710 Application Control Engine Appliance before A18a uses default 1 usernames and 2 passwords for a the administrator, b web management, and c device management, which makes it easier for remote attackers to perform configuration changes to the Device Manager and other components, or...

CVE-2009-0620

Cisco ACE vulnerabilities (CVE-2009-0620, and related CVEs in the same advisory) affect the Cisco ACE Application Control Engine Module for Catalyst 6500/7600 and the Cisco ACE 4710 Appliance. The core issue is default credentials: default administrator and web-management accounts are used, enabl...

CVE-2009-0621

CVE-2009-0621 affects the Cisco ACE 4710 Application Control Engine appliance and the ACE Module. The advisory and multiple sources state that default administrator, web management, and (for the appliance) device-management credentials allow a remote attacker to modify configuration or gain OS ac...

CVE-2009-0616

Cisco ANM (and ACE Device Manager) prior to listed fixed releases contain a default credentials vulnerability. ANM 2.0 and earlier allow remote access or DoS via unchanged admin/MySQL/default credentials; Java agent privilege escalation also reported. The advisory fixes include ANM 2.0 Update A a...

Cisco ACE应用控制引擎模块和Cisco ACE 4710应用控制引擎多个安全漏洞

BUGTRAQ ID: 33900 CVECAN ID: CVE-2009-0620,CVE-2009-0621,CVE-2009-0622,CVE-2009-0623,CVE-2009-0624,CVE-2009-0625 Cisco ACE 4710应用控制引擎设备和Cisco ACE应用控制引擎模块是数据中心的负载均衡和应用交付解决方案。 默认用户名和口令 +------------------------------ Cisco ACE 4710应用控制引擎设备的A18a之前软件版本使用默认的管理员、Web管理和设备管理帐号凭据；类似的，Cisco...

Default credentials

The HTTP interface in Swann DVR4-SecuraNet has a certain default administrative username and password, which makes it easier for remote attackers to obtain privileged access...

CVE-2009-0644

The HTTP interface in Swann DVR4-SecuraNet has a certain default administrative username and password, which makes it easier for remote attackers to obtain privileged access...

CVE-2009-0644

The HTTP interface in Swann DVR4-SecuraNet has a certain default administrative username and password, which makes it easier for remote attackers to obtain privileged access...

Trend Micro InterScan Web Security Suite Default Credentials

Trend Micro InterScan Web Security Suite is installed on the remote host. It is possible to log into the web management interface using default credentials. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid35649;...

Remote Authentication Bypass - Swann DVR4 SecuraNet (possibly DVR9 as well)

Dear BugTraq Readers, It is possible to download the configuration containing usernames/passwords to this CCTV DVR which is being marketed by Swann Security suspect that it is a rebranded AVTech unit tez@tetris $ curl http://192.168.2.100/../../var/run/vynetman.cfg snipPadmin111111 the above are...

Default Password (password) for 'admin' Account on Broadcom BCM96338 ADSL Router

The remote host is a Broadcom BCM96338 ADSL router, and its 'admin' account uses the password 'password'. An attacker may leverage this issue to gain administrative access to the affected system. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid35621; scriptversion...

Profense Web Application Firewall Default Credentials

Armorlogic Profense Web Application Firewall is installed on the remote host. It is possible to log into the web management interface using default credentials. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid35580...

Default credentials

Red Hat Certificate System 7.2 stores passwords in cleartext in the UserDirEnrollment log, the RA wizard installer log, and unspecified other debug log files, and uses weak permissions for these files, which allows local users to discover passwords by reading the files...

Default credentials

The UFS implementation in the kernel in Sun OpenSolaris snv29 through snv90 allows local users to cause a denial of service panic via the single posixfallocate test in the SUSv3 POSIX test suite, related to an FALLOCSP fcntl call...

Sun Java System Identity Manager Default Credentials

The remote installation of Sun Java System Identity Manager is configured to use default credentials to control administrative access. Knowing these, an attacker can gain administrative control of the affected application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Default credentials

Sun Sun Ray Server Software 3.x and 4.0 and Sun Ray Windows Connector 1.1 and 2.0 expose the LDAP password during a configuration step, which allows local users to discover the Sun Ray administration password, and obtain admin access to the Data Store and Administration GUI, via unspecified vecto...

Default credentials

The ClearQuest Maintenance Tool in IBM Rational ClearQuest 7.0.0 before 7.0.0.4 and 7.0.1 before 7.0.1.3 on Windows allows local users to obtain 1 user and 2 database passwords by using a password revealer utility on a field containing a series of asterisks...

webhub-bypass.txt

. . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com d3hydr8 - rsauron - baltazar - sinner01 - r45c4l - beenu and all darkc0de members Author: p47r1ck Home : www.darkc0de.com Email :...

infinite-bypass.txt

. . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com d3hydr8 - rsauron - baltazar - sinner01 - r45c4l - beenu and all darkc0de members Author: p47r1ck Home : www.darkc0de.com Email :...