552 matches found
Debian Linux 2.1 apcd Symlink Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/958/info A vulnerability exists in the apcd package, as shipped in Debian GNU/Linux 2.1. By sending the apcd process a SIGUSR1, a file will be created in /tmp called upsstat. This file contains information about the statu...
Default Password (rain) for 'root' Account
The account 'root' on the remote host has the password 'rain'. An attacker may leverage this to gain access, likely as an administrator, to the affected system. Note that EMC Cloud Tiering Appliance is known to use these credentials by default. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
Quantum DXi V1000硬编码Root账户安全漏洞
Quantum DXi V1000是一款功能完备的虚拟重复数据删除设备。 Quantum DXi V1000使用了硬编码的Root凭证，攻击者可以利用漏洞绕过某些安全限制，以root权限访问受限制的shell。 0 Quantum DXi V1000 2.3.0.1 目前厂商已经发布了升级补丁以修复漏洞，请下载使用： http://www.quantum.com/default.htm...
Quantum DXi V1000静态密钥安全漏洞
Bugtraq ID:66267 Quantum DXi V1000是一款功能完备的虚拟重复数据删除设备。 Quantum DXi V1000存在一个root账户的静态SSH私钥，允许攻击者利用该密钥未授权以root权限访问设备。 该设备的root用户还包含内置密码。 0 Quantum DXi V1000 2.2.1 Quantum DXi V1000 2.3.0.1已经修复该漏洞，建议用户下载更新： http://quantum.com/...
Cisco UCS Director default credentials
default root account is accessible via ssh...
Loadbalancer.org Enterprise VA 7.5.2 - Static SSH Key
----------- Author: ----------- xistence ------------------------- Affected products: ------------------------- Loadbalancer.org Enterprise VA 7.5.2 and below ------------------------- Affected vendors: ------------------------- Loadbalancer.org http://www.loadbalancer.org/...
Loadbalancer.org Enterprise VA 7.5.2 - Static SSH Key Vulnerability
The Loadbalancer.org Virtual Appliance is a revolution in software load balancing. The software is simple to install on Windows, Mac & Linux and does not have any adverse effects on the host operating system. Details: ---------- 0x01 - SSH Private Key Loadbalancer.org Enterprise VA 7.5.2 contains...
Fedora 19 : heat-jeos-9-1.fc19 (2013-9715)
Rebase to v9 to include locking root account fix Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
Default Password (arcsight) for 'root' Account
The account 'root' on the remote host has the password 'arcsight'. An attacker may leverage this issue to gain total control of the affected system. Note that some network devices are known to use these credentials by default. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "root";...
CVE-2013-4876
The Verizon Wireless Network Extender SCS-2U01 has a hardcoded password for the root account, which makes it easier for physically proximate attackers to obtain administrative access by leveraging a login prompt...
Default password (dasdec1) for 'root' account
The account 'root' on the remote host has the password 'dasdec1'. An attacker may leverage this issue to gain access to the affected system and launch further attacks against it. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "root"; password = "dasdec1";...
Fedora 19 : livecd-tools-19.4-1.fc19 (2013-9827)
Some fixed for running from F19 host. The livecd-tools package provides support for reading and executing Kickstart files in order to create a system image. It was discovered that livecd-tools gave the root user an empty password rather than leaving the password locked in situations where no...
Default Password (openvpnas) for 'root' Account
The account 'root' on the remote host has the password 'openvpnas'. An attacker may leverage this issue to gain administrative access to the affected system. Note that OpenVPN Access Server virtual appliances are known to use these credentials to provide complete, administrative access to the...
Default Password (abc123) for 'root' Account
The account 'root' on the remote host has the password 'abc123'. An attacker may leverage this issue to gain full access to the affected system. Note that Junos Space is known to use these credentials by default. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "root"; password =...
CVE-2012-4702
360 Systems Maxx, Image Server Maxx, and Image Server 2000 have a hardcoded password for the root account, which makes it easier for remote attackers to execute arbitrary code, or modify video content or scheduling, via an SSH session...
Default Password (openelec) for 'root' Account
The account 'root' on the remote host has the password 'openelec'. An attacker can exploit this issue to gain full access to the affected system. Note that a version of Linux optimized for Raspberry Pi ARM computers is known to use these credentials by default. %NASLMINLEVEL 70300 C Tenable Netwo...
Default Password (raspi) for 'root' Account
The account 'root' on the remote host has the password 'raspi'. An attacker may leverage this issue to gain full access to the affected system. Note that a version of Linux optimized for Raspberry Pi ARM computers is known to use these credentials by default. %NASLMINLEVEL 70300 C Tenable Network...
Novell NetIQ Privileged User Manager Security Bypass
Added: 12/03/2012 BID: 56539 OSVDB: 87334 Background Novell NetIQ Privileged User Manager NPUM allows IT administrators to work on systems without exposing superuser administrator or supervisor passwords or root-account credentials to the administrator. Problem NetIQ Privileged User Manager 2.3.1...
CVE-2012-4442
Monkey HTTP Daemon 0.9.3 retains the supplementary group IDs of the root account during operations with a non-root effective UID, which might allow local users to bypass intended file-read restrictions by leveraging a race condition in a file-permission check...
CVE-2012-4577
The Linux firmware image on 1 Korenix Jetport 5600 series serial-device servers and 2 ORing Industrial DIN-Rail serial-device servers has a hardcoded password of "password" for the root account, which allows remote attackers to obtain administrative access via an SSH session...