Уязвимость в NetProwler (default password)

Задается стандартный пароль администрирования и доступа к базам данных по-умолчанию...

CVE-2001-1424

Alcatel Speed Touch ADSL modem running firmware KHDSAA.108, KHDSAA.132, KHDSBA.133, and KHDSAA.134 has a blank default password, which allows remote attackers to gain unauthorized access...

Alcatel ADSL modems contain a null default password

Overview The San Diego Supercomputer Center SDSC has recently discovered several vulnerabilities in the Alcatel Speed Touch line of Asymmetric Digital Subscriber Line ADSL modems. These vulnerabilities are the result of weak authentication and access control policies and result in one or more of...

IBM DB2 default account and password Vulnerability

1.Description The DB2 Universal Database builds upon the stability and performance of DB2 on the mainframe and provides the features required in a distributed database product. DB2 Universal Database UDB is IBM's relational database server solution for the UNIX, OS/2 and Windows NT/2000 operating...

IBM DB2 - Universal Database for Linux 6.1Windows NT 6.1 Known Default Password

IBM DB2 - Universal Database for Linux 6.1Windows NT 6.1 Known Default Password source: https://www.securityfocus.com/bid/2068/info IBM DB2 Universal Database is a distributed database application. DB2 Universal Database contains a default username and password that would enable a user access to...

CVE-2000-1015

The CVE-2000-1015 entry concerns Slashcode prior to version 2.0 Alpha, which ships with a default administrative password. The root cause is the presence of this default credential, enabling remote attackers to gain Slashcode privileges and potentially execute arbitrary commands. Documented impac...

CVE-2000-1015

The default configuration of Slashcode before version 2.0 Alpha has a default administrative password, which allows remote attackers to gain Slashcode privileges and possibly execute arbitrary commands...

CVE-1999-0954

WWWBoard contains a default administrative account (WebAdmin/WebBoard) and exposes a password file (passwd.txt) in the web root, enabling remote attackers to obtain encrypted credentials. The vulnerability is driven by hard-coded defaults and insecure password storage/download behavior, allowing ...

CVE-1999-0954

WWWBoard has a default username and default password...

Axis Camera Default Password

The remote host seems to be an Axis Network Camera. It was possible to log into the remote host with the default credentials 'root/pass'. An attacker may use these credentials to trivially access the system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Script audit and contributions from...

Shiva Integrator Default Password

The remote Shiva router uses the default password. This means that anyone who has downloaded a user manual can telnet to it and reconfigure it to lock you out of it, and to prevent you to use your internet connection. This script was written by Stefaan Van Dooren See the Nessus Scripts License fo...

robpoll-cgi-problem.txt

Software: Robpoll.cgi URL: http:// Platforms: Unix, NT Type: CGI, Change password by default robpoll.cgi Remote Possible Problem discovered by Nick: alt3kx Mail: [email protected] Webs: w w w . h e r t m x . o r g w w w . s 0 d . o r g w w w . r a z a - m e x i c a n a . o r g Summary:...

ralfchat12.txt

RALF'S CHAT V.12 - http://www.ralfchat.de Ralf's Chat is a free cgi based chat program. But Ralf's Chat has some awful bugs in it. I played myself with the CGI and discovered that the masterpassword is set by a default password called: mpw So, if someone else who carries on this chatedited the...

ISS ICEcap Default Password

The ICEcap package has a default login of 'iceman' with no password. An attacker may use this fact to log into the console and/or push false alerts on port 8082. In addition to this, an attacker may inject code in ICEcap v2.0.23 and below. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Than...

Проблемы с Piranha под RH Linux

Во-первых по-умолчанию имеется простой пароль "черного хода". Во вторых ошибки в скриптах позволяют выполнить любое приложение с привилегиями сервера...

piranha default password/exploit

Hi, In the interest of full disclosure I used an alias the last few times, let's see how this goes as me here are the details of the piranha vulnerability. RE: ISS Security Advisory iss.00-04-24.Piranha To summarize, piranha is a GUI tool for monitoring, configuring, and administering an LVS...

Piranha's RH6.2 default password

The 'piranha' package is installed on the remote host. This package, as it is distributed with Linux RedHat 6.2, comes with the login/password combination 'piranha/q' or 'piranha'/'piranha'. An attacker may use it to reconfigure your Linux Virtual Servers LVS. %NASLMINLEVEL 70300 C Tenable Networ...

ACC Tigris Access Terminal Configuration Disclosure

The remote router is an ACC Tigris Terminal Server. Some software versions on this router will allow an attacker to run the SHOW command without first providing authentication. An attacker could exploit this to read part of the router's configuration. In addition there is a 'public' account with ...

pocsag.txt

While playing with the ever fun tool Pocsag v2.05, I found something interesting. The client by default accepts connections on port 8000 with the password 'password' even if the TCP/IP Remote access on port xxxx box is unchecked. You can change the default port, however the client will still acce...

Pocsag POC32 Remote Service Default Password (password)

It is possible to log into the remote pocsag service and view the streams of decoded pager messages using the password 'password'. An attacker may use this problem to gain some knowledge about the computer user and then trick him by social engineering. C Tenable Network Security, Inc...