1427 matches found
Default credentials
A certain Comcast Business Gateway configuration of the SMC SMCD3G-CCR with firmware before 1.4.0.49.2 has a default password of D0nt4g3tme for the mso account, which makes it easier for remote attackers to obtain administrative access via the 1 web interface or 2 TELNET interface...
CVE-2011-0887
The CVE-2011-0887 entry refers to the Comcast DOCSIS 3.0 Business Gateway (SMCD3G-CCR) web management portal. Affected firmware prior to 1.4.0.49.2 uses a predictable session ID (“userid” cookie) derived from epoch time, enabling brute-forcing to hijack active sessions. Trustwave’s SpiderLabs adv...
CVE-2011-0887
The web management portal on the SMC SMCD3G-CCR aka Comcast Business Gateway with firmware before 1.4.0.49.2 uses predictable session IDs based on time values, which makes it easier for remote attackers to hijack sessions via a brute-force attack on the userid cookie...
CVE-2011-0885
The CVE-2011-0885 entry affects Comcast DOCSIS 3.0 Business Gateway (SMCD3G-CCR) prior to firmware 1.4.0.49.2. Trustwave’s TWSL2011-002 describes a default credential flaw: the admin login is “mso” with password “D0nt4g3tme,” enabling remote administrative access via web or TELNET. The advisory a...
CVE-2011-0886
The CVE-2011-0886 entry refers to CSRF flaws in the Comcast DOCSIS 3.0 Business Gateway (SMCD3G-CCR) web interface prior to firmware 1.4.0.49.2. Vulnerabilities include: (1) login CSRF that can hijack intranet connectivity, (2) CSRF allowing remote admin activation via goform/RemoteRange, and (3)...
CVE-2011-0886
Multiple cross-site request forgery CSRF vulnerabilities in the web interface on the SMC SMCD3G-CCR aka Comcast Business Gateway with firmware before 1.4.0.49.2 allow remote attackers to 1 hijack the intranet connectivity of arbitrary users for requests that perform a login via goform/login, or...
CVE-2011-0885: Undefined Security Weakness
A certain Comcast Business Gateway configuration of the SMC SMCD3G-CCR with firmware before 1.4.0.49.2 has a default password of D0nt4g3tme for the mso account, which makes it easier for remote attackers to obtain administrative access via the 1 web interface or 2 TELNET interface...
PT-2011-2732
Name of the Vulnerable Software and Affected Versions SMC SMCD3G-CCR aka Comcast Business Gateway versions prior to 1.4.0.49.2 Description The issue concerns multiple cross-site request forgery CSRF vulnerabilities in the web interface. These vulnerabilities allow remote attackers to hijack the...
PT-2011-2731
Name of the Vulnerable Software and Affected Versions SMC SMCD3G-CCR versions prior to 1.4.0.49.2 Description The issue allows remote attackers to gain administrative access due to a default password for the mso account. This default password is 'D0nt4g3tme'. Attackers can exploit this via the we...
CVE-2011-0886: Cross-Site Request Forgery (CSRF)
Multiple cross-site request forgery CSRF vulnerabilities in the web interface on the SMC SMCD3G-CCR aka Comcast Business Gateway with firmware before 1.4.0.49.2 allow remote attackers to 1 hijack the intranet connectivity of arbitrary users for requests that perform a login via goform/login, or...
CVE-2011-0887: Undefined Security Weakness
The web management portal on the SMC SMCD3G-CCR aka Comcast Business Gateway with firmware before 1.4.0.49.2 uses predictable session IDs based on time values, which makes it easier for remote attackers to hijack sessions via a brute-force attack on the userid cookie...
PT-2011-2733
Name of the Vulnerable Software and Affected Versions SMC SMCD3G-CCR aka Comcast Business Gateway versions prior to 1.4.0.49.2 Description The issue concerns the web management portal of the affected device, which uses predictable session IDs based on time values. This predictability makes it...
SMC Networks SMCD3G Session Management - Authentication Bypass
SMC Networks SMCD3G Session Management - Authentication Bypass source: https://www.securityfocus.com/bid/46178/info The SMC Networks SMCD3G gateway is prone to a remote authentication-bypass vulnerability. An attacker can exploit this issue to gain unauthorized administrative access to the affect...
SMC Networks SMCD3G Session Management - Authentication Bypass
source: https://www.securityfocus.com/bid/46178/info The SMC Networks SMCD3G gateway is prone to a remote authentication-bypass vulnerability. An attacker can exploit this issue to gain unauthorized administrative access to the affected devices. !/bin/bash start=1267604160 end=1267605960 for...
Accton-based switches (3com, Dell, SMC, Foundry, EdgeCore) Backdoor
Exploit for windows platform in category remote exploits =================================================================== Accton-based switches 3com, Dell, SMC, Foundry, EdgeCore Backdoor =================================================================== On the 15th of august 2009, at the...
Accton-based switches (3com Dell SMC Foundry EdgeCore) - Backdoor Password
Accton-based switches 3com Dell SMC Foundry EdgeCore - Backdoor Password On the 15th of august 2009, at the HAR2009 conference, the existence of a backdoor password in Accton-based switches was revealed by Edwin Eefting, Erik Smit and Erwin Drent 12. Even though this is a 365-day exploit, it does...
Accton-based switches (3com / Dell / SMC / Foundry / EdgeCore) - Backdoor Password
On the 15th of august 2009, at the HAR2009 conference, the existence of a backdoor password in Accton-based switches was revealed by Edwin Eefting, Erik Smit and Erwin Drent 12. Even though this is a 365-day exploit, it does not seem to be listed in any of the vulnerability databases. Also, I cou...
Solaris Update for /usr/sadm/lib/smc/lib/preload/jsdk21.jar 116808-02
Check for the Version of /usr/sadm/lib/smc/lib/preload/jsdk21.jar OpenVAS Vulnerability Test Solaris Update for /usr/sadm/lib/smc/lib/preload/jsdk21.jar 116808-02 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free...
Solaris Update for /usr/sadm/lib/smc/lib/preload/jsdk21.jar 116807-02
Check for the Version of /usr/sadm/lib/smc/lib/preload/jsdk21.jar OpenVAS Vulnerability Test Solaris Update for /usr/sadm/lib/smc/lib/preload/jsdk21.jar 116807-02 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free...
Solaris Update for /usr/sadm/lib/smc/lib/preload/jsdk21.jar 116807-02
Check for the Version of /usr/sadm/lib/smc/lib/preload/jsdk21.jar OpenVAS Vulnerability Test Solaris Update for /usr/sadm/lib/smc/lib/preload/jsdk21.jar 116807-02 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free...