2476 matches found
Axis Camera Default Password
The remote host seems to be an Axis Network Camera. It was possible to log into the remote host with the default credentials 'root/pass'. An attacker may use these credentials to trivially access the system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Script audit and contributions from...
Shiva Integrator Default Password
The remote Shiva router uses the default password. This means that anyone who has downloaded a user manual can telnet to it and reconfigure it to lock you out of it, and to prevent you to use your internet connection. This script was written by Stefaan Van Dooren See the Nessus Scripts License fo...
robpoll-cgi-problem.txt
Software: Robpoll.cgi URL: http:// Platforms: Unix, NT Type: CGI, Change password by default robpoll.cgi Remote Possible Problem discovered by Nick: alt3kx Mail: [email protected] Webs: w w w . h e r t m x . o r g w w w . s 0 d . o r g w w w . r a z a - m e x i c a n a . o r g Summary:...
ralfchat12.txt
RALF'S CHAT V.12 - http://www.ralfchat.de Ralf's Chat is a free cgi based chat program. But Ralf's Chat has some awful bugs in it. I played myself with the CGI and discovered that the masterpassword is set by a default password called: mpw So, if someone else who carries on this chatedited the...
ISS ICEcap Default Password
The ICEcap package has a default login of 'iceman' with no password. An attacker may use this fact to log into the console and/or push false alerts on port 8082. In addition to this, an attacker may inject code in ICEcap v2.0.23 and below. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Than...
Проблемы с Piranha под RH Linux
Во-первых по-умолчанию имеется простой пароль "черного хода". Во вторых ошибки в скриптах позволяют выполнить любое приложение с привилегиями сервера...
piranha default password/exploit
Hi, In the interest of full disclosure I used an alias the last few times, let's see how this goes as me here are the details of the piranha vulnerability. RE: ISS Security Advisory iss.00-04-24.Piranha To summarize, piranha is a GUI tool for monitoring, configuring, and administering an LVS...
Piranha's RH6.2 default password
The 'piranha' package is installed on the remote host. This package, as it is distributed with Linux RedHat 6.2, comes with the login/password combination 'piranha/q' or 'piranha'/'piranha'. An attacker may use it to reconfigure your Linux Virtual Servers LVS. %NASLMINLEVEL 70300 C Tenable Networ...
ACC Tigris Access Terminal Configuration Disclosure
The remote router is an ACC Tigris Terminal Server. Some software versions on this router will allow an attacker to run the SHOW command without first providing authentication. An attacker could exploit this to read part of the router's configuration. In addition there is a 'public' account with ...
pocsag.txt
While playing with the ever fun tool Pocsag v2.05, I found something interesting. The client by default accepts connections on port 8000 with the password 'password' even if the TCP/IP Remote access on port xxxx box is unchecked. You can change the default port, however the client will still acce...
Pocsag POC32 Remote Service Default Password (password)
It is possible to log into the remote pocsag service and view the streams of decoded pager messages using the password 'password'. An attacker may use this problem to gain some knowledge about the computer user and then trick him by social engineering. C Tenable Network Security, Inc...
EUVD-1999-0517
A NETBIOS/SMB share password is the default, null, or missing...
CVE-2000-0038
CVE-2000-0038 concerns glFtpD (glftpd) software where a default glftpd user account exists with a default password and a UID of 0. The vulnerability is tied to this account’s privileged UID, enabling potential unauthorized access or privilege elevation. The PT-1999-1846 entry notes affected versi...
CVE-1999-0508
An account on a router, firewall, or other network device has a default, null, blank, or missing password...
CVE-1999-0677
CVE-1999-0677 affects the WebRamp web administration utility, with a default password that enables unauthorized access. The NVD entry reports a CVSSv2 base score of 7.5 (Network attack, Low attack complexity, No authentication required, Partial impact on confidentiality, integrity, and availabili...
CVE-1999-0502
CVE-1999-0502 describes Unix accounts with default, null, blank or missing passwords. The documented impact is partial confidentiality, integrity, and availability compromise (authentication is none, allowing network access). CVSS base score 7.5 (HIGH) with network attack vector and low complexit...
CVE-1999-0519
CVE-1999-0519 describes a Windows SMB/NETBIOS issue where a share password is default, null, or missing, enabling NULL session authentication bypass. Public sources (NVD, Red Hat, SUSE, OpenVAS/Nessus entries) consistently describe an authentication bypass risk tied to SMB/NETBIOS NULL sessions. ...
CVE-1999-0502
A Unix account has a default, null, blank, or missing password...