FreeBSD Ports: mpg123, mpg123-nas, mpg123-esound

The remote host is missing an update to the system as announced in the referenced advisory. VID 20d16518-2477-11d9-814e-0001020eed82 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

CVE-2008-1431

RaidSonic NAS-4220-B with 2.6.0-n2007-10-11 firmware stores a partition encryption key in an unencrypted /system/.crypt file with base64 encoding, which allows local users to obtain the key...

Design/Logic Flaw

RaidSonic NAS-4220-B with 2.6.0-n2007-10-11 firmware stores a partition encryption key in an unencrypted /system/.crypt file with base64 encoding, which allows local users to obtain the key...

CVE-2008-1431

RaidSonic NAS-4220-B with 2.6.0-n2007-10-11 firmware stores a partition encryption key in an unencrypted /system/.crypt file with base64 encoding, which allows local users to obtain the key...

CVE-2008-1431

CVE-2008-1431 affects RaidSonic NAS-4220-B with firmware 2.6.0-n (2007-10-11). The vulnerability stems from storing the partition encryption key in an unencrypted /system/.crypt file, encoded with base64, enabling local users to obtain the key. Impact is limited to local access exposure of the en...

raidsonic nas-4220 crypt disk key leak (stored in plain on unencrypted partition)

Manufacturer: RaidSonic www.raidsonic.de Device: NAS-4220-B Firmware: 2.6.0-n2007-10-11 Device Type: end user grade NAS box OS: Linux 2.6.15 Architecture: ARM Designed by: Storm Semiconductor Inc www.storlinksemi.com Problem: Hard disk encryption key stored in plain on unencrypted partition. Time...

Raidsonic nas-4220 weak cryptography

Encryption key is stored with data...

raidsonic-disclose.txt

Manufacturer: RaidSonic www.raidsonic.de Device: NAS-4220-B Firmware: 2.6.0-n2007-10-11 Device Type: end user grade NAS box OS: Linux 2.6.15 Architecture: ARM Designed by: Storm Semiconductor Inc www.storlinksemi.com Problem: Hard disk encryption key stored in plain on unencrypted partition. Time...

Thecus N5200Pro NAS Server Control Panel RFI Vulnerability

No description provided by source. Thecus N5200Pro NAS Server Control Panel Remote File nclude Author : CrackersChild Mail : [email protected] Bug in : usrgetform.html ?php $htm=$REQUEST'name'; requireonce"/img/htdocs/webconfig"; requireonce"/img/www/inc/function.php"; getsysconf;...

thecus-rfi.txt

Thecus N5200Pro NAS Server Control Panel Remote File İnclude Author : CrackersChild Mail : [email protected] Bug in : usrgetform.html Exploit : www.site.com:9443/usr/usrgetform.html?name=Shelz? İnfo : http://www.thecus.com/productsover.php?cid=11&pid=8 Greetz: Str0ke...

Remote file inclusion

PHP remote file inclusion vulnerability in usrgetform.html in Thecus N5200Pro NAS Server allows remote attackers to execute arbitrary PHP code via a URL in the name parameter...

CVE-2008-0804

CVE-2008-0804 is a PHP remote file inclusion vulnerability in usrgetform.html of Thecus N5200Pro NAS Server, allowing an attacker to execute arbitrary PHP code by supplying a URL in the name parameter. The issue is remotely exploitable over the network with no authentication, and the NVD metrics ...

Thecus N5200Pro NAS Server Control Panel - Remote File Inclusion

Thecus N5200Pro NAS Server Control Panel Remote File Ä°nclude Author : CrackersChild Mail : [email protected] Bug in : usrgetform.html Exploit : www.site.com:9443/usr/usrgetform.html?name=Shelz? Ä°nfo : http://www.thecus.com/productsover.php?cid=11&pid=8 Greetz: Str0ke milw0rm.com 2008-02-18...

Thecus N5200Pro NAS Server Control Panel RFI Vulnerability

Exploit for hardware platform in category remote exploits ========================================================== Thecus N5200Pro NAS Server Control Panel RFI Vulnerability ========================================================== Thecus N5200Pro NAS Server Control Panel Remote File Include...

Thecus N5200Pro NAS Server Control Panel - Remote File Inclusion

Thecus N5200Pro NAS Server Control Panel - Remote File Inclusion Thecus N5200Pro NAS Server Control Panel Remote File Ä°nclude Author : CrackersChild Mail : [email protected] Bug in : usrgetform.html Exploit : www.site.com:9443/usr/usrgetform.html?name=Shelz? Ä°nfo :...

Debian: Security Advisory (DSA-1273-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 5.10 / 6.06 LTS / 6.10 : nas vulnerabilities (USN-446-1)

Luigi Auriemma discovered multiple flaws in the Network Audio System server. Remote attackers could send specially crafted network requests that could lead to a denial of service or execution of arbitrary code. Note that default Ubuntu installs do not include the NAS server. Note that Tenable...

Promise NAS NS4300N GUI bug

List, There is a bug in the Promise NAS NS4300N web GUI firmware version 1.1.0.5 which allows an authenticated admin user to change the password of the 'root' account. The user management portion of the web interface allows the admin user to change user's passwords. The PHP script that handles th...

Promise NAS NS4300N superuser access protection bypass

It's possible to bypass resttrictions for direct remote root access...

promise-root.txt

List, There is a bug in the Promise NAS NS4300N web GUI firmware version 1.1.0.5 which allows an authenticated admin user to change the password of the 'root' account. The user management portion of the web interface allows the admin user to change user's passwords. The PHP script that handles th...