289 matches found
CVE-2006-1002
The CVE-2006-1002 entry concerns NETGEAR WGT624 Wireless DSL router with a default account: super_username = Gearguy and super_passwd = Geardog. This hardcoded credential enables remote attackers to modify the device configuration, indicating a remote-authentication vulnerability. The initial des...
CVE-2004-2556
NetGear WG602 aka WG602v1 Wireless Access Point firmware 1.04.0 and 1.5.67 has a hardcoded account of username "super" and password "5777364", which allows remote attackers to modify the configuration...
Sun Cobalt Adaptive Firewall Detection (HTTP)
Sun Cobalt machines contain a firewall mechanism, this mechanism can be configured remotely by accessing Cobalt SPDX-FileCopyrightText: 2005 SecurITeam Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier...
InterScan VirusWall Remote Configuration Vulnerability
The management interface used with the Interscan VirusWall uses several cgi programs that may allow a malicious user to remotely change the configuration of the server without any authorization using maliciously constructed querystrings. SPDX-FileCopyrightText: 2001 INTRANODE Some text descriptio...
InterScan VirusWall Remote Configuration Vulnerability
The management interface used with the Interscan VirusWall uses several cgi programs that may allow a malicious user to remotely change the configuration of the server without any authorization using maliciously constructed querystrings. OpenVAS Vulnerability Test $Id: interscanvwcgi.nasl 6063...
cfengine format string vulnerability
Cfengine is running on this remote host. Cfengine contains a component, cfd, which serves as a remote-configuration client to cfengine. This version of cfd contains several flaws in the way that it calls syslog. As a result, trusted hosts and valid users if access controls are not in place can...
JBoss Malformed HTTP Request Remote Configuration Information Disclosure
Binary data 3021.prm...
JBoss org.jboss.web.WebServer Class Multiple Vulnerabilities (Source Disc, ID)
The remote JBoss server is vulnerable to an information disclosure flaw that could allow an attacker to retrieve the physical path of the server installation, its security policy, or to guess its exact version number. An attacker may use this flaw to gain more information about the remote...
CVE-2005-1179
CVE-2005-1179 concerns Xerox MicroServer Web Server in various WorkCentre models (e.g., M35/M45/M55 with 2.028.11.000–2.97.20.032 and 4.84.16.000–4.97.20.032; Pro 35/45/55 and Pro 65/75/90 ranges listed in the description) where an SNMP authentication issue could allow remote modification of syst...
CVE-2005-0232
Firefox 1.0 allows remote attackers to modify Boolean configuration parameters for the about:config site by using a plugin such as Flash, and the -moz-opacity filter, to display the about:config site then cause the user to double-click at a certain screen position, aka "Fireflashing."...
IlohaMail Multiple Configuration Files Remote Information Disclosure
The target is running at least one instance of IlohaMail that allows anyone to retrieve its configuration files over the web. These files may contain sensitive information. For example, conf/conf.inc may hold a username / password used for SMTP authentication. %NASLMINLEVEL 70300 This script was...
ZyXEL Prestige 650 unauthorized access
It's possible remotely reload router's configuration with /rpFWUpload.html...
NetAsq IPS-Firewalls Detection
It is very likely that this remote host is a NetAsq IPS-Firewalls with port TCP/1300 open to allow Firewall Manager tool to remotely configure it. Letting attackers know that you are using a NetAsq will help them to focus their attack or will make them change their strategy. You should not let th...
PostNuke Install Script Admin Password Disclosure
The remote host is running the PostNuke content management system. The installation script of the remote PostNuke CMS install.php is accessible. An attacker may access it to reconfigure the remote PostNuke installation and obtain the password of the remote database and PostNuke installation...
[Full-Disclosure] Sweex 802.11g router/accesspoint config disclosure / remote config
Maniac Security Advisory 2004-01 Configuration disclosure on Wireless Accesspoint/Router SUMMARY Critical elements of the accesspoint's configuration can be discovered by any client connected to the accesspoint. This includes the administration username and password. AFFECTED PRODUCTS Sweex...
Orinoco OEM Residential Gateway - SNMP Community String Remote Configuration
Orinoco OEM Residential Gateway - SNMP Community String Remote Configuration source: https://www.securityfocus.com/bid/5436/info Orinoco is the manufacturer of various wireless network components, including access points and network cards. It is possible to remotely gain access to the...
Mirabilis ICQ 2002 - Sound Scheme Remote Configuration Modification
Mirabilis ICQ 2002 - Sound Scheme Remote Configuration Modification source: https://www.securityfocus.com/bid/5239/info ICQ is an instant messenger client for Microsoft Windows systems. ICQ includes support for sound schemes. ICQ sound scheme files are generally given the .scm extension...
Mirabilis ICQ 2002 - Sound Scheme Remote Configuration Modification
source: https://www.securityfocus.com/bid/5239/info ICQ is an instant messenger client for Microsoft Windows systems. ICQ includes support for sound schemes. ICQ sound scheme files are generally given the .scm extension. Reportedly, it is possible for a remote party to modify sound settings in IC...
Arescom NetDSL-1000 telnetd DoS
BACKGROUND The Arescom NetDSL-1000 series of dsl routers is in common use by a number of dsl providers. It offers connectivity to the dsl circuit through ethernet and USB. They are intended to be delivered to dsl customers as pre-configured black boxen, customers don't get to know the configurati...