CVE-2005-0494

The RgSecurity form in the HTTP server for the Thomson TCW690 cable modem running firmware 2.1 and software ST42.03.0a does not properly validate the password before performing changes, which allows remote attackers on the LAN to gain access via a direct POST request...

Thomson TCW690 POST Password Validation Vulnerability

I found a vulnerability in this cablemodem which a malicious user inside LAN can get the control of the cablemodem easily. This cablemodem model is given by the spanish ISP "AUNA". Details ======= Product: Thomson TCW690 cablemodem Affected Version: ST42.03.0a not tested in minor versions Immune...

Thomson TCW690 POST Password Validation Exploit

Exploit for hardware platform in category remote exploits =============================================== Thomson TCW690 POST Password Validation Exploit =============================================== / Thomson TCW690 POST Password Validation exploit Tested with hardware version 2.1 and software...

Thomson TCW690 POST Password Validation Exploit

No description provided by source. / Thomson TCW690 POST Password Validation exploit Tested with hardware version 2.1 and software version ST42.03.0a Bug found by: MurDoK murdok.lnx at gmail.com Date: 02.19.2005 sh-3.00$ gcc mdktcw690.c -o tcw690 sh-3.00$ ./tcw690 192.168.0.1 123 Thomson TCW690...

Thomson TCW690 - POST Password Validation

Thomson TCW690 - POST Password Validation / Thomson TCW690 POST Password Validation exploit Tested with hardware version 2.1 and software version ST42.03.0a Bug found by: MurDoK Date: 02.19.2005 sh-3.00$ gcc mdktcw690.c -o tcw690 sh-3.00$ ./tcw690 192.168.0.1 123 Thomson TCW690 POST Password...

Thomson TCW690 - POST Password Validation

/ Thomson TCW690 POST Password Validation exploit Tested with hardware version 2.1 and software version ST42.03.0a Bug found by: MurDoK Date: 02.19.2005 sh-3.00$ gcc mdktcw690.c -o tcw690 sh-3.00$ ./tcw690 192.168.0.1 123 Thomson TCW690 POST Password Validation Change password exploit coded by...

CVE-2000-0944

The CVE-2000-0944 issue affects CGI Script Center News Update 1.1. The vulnerability is in the password change flow where the original news administration password is not properly validated, enabling remote attackers to modify the password without knowing the original. Impact is unauthenticated r...

PT-2000-1856 · Cgi Script Center · Cgi Script Center News Update

Name of the Vulnerable Software and Affected Versions: CGI Script Center News Update version 1.1 Description: The issue concerns a problem with password validation during a password change operation. Specifically, it does not properly validate the original news administration password, allowing...

Очередная проблема с Netscape Messaging Server

Имя и пароль пользователя проверяются отдельно, что дает возможность получения списка пользователей...