CVE-2012-5966

The CVE-2012-5966 issue affects the D-Link DSL2730U router's restricted Telnet shell. An authenticated remote attacker can bypass the command whitelist by chaining shell metacharacters that follow a whitelisted command, effectively injecting commands via sh -c (e.g., whitelisted command with subs...

PT-2012-6209 · D Link · D-Link Dsl 2730-U

Name of the Vulnerable Software and Affected Versions: D-Link DSL2730U router affected versions not specified Description: The issue allows remote authenticated users to bypass intended command restrictions on the D-Link DSL2730U router. This is achieved by using shell metacharacters that follow ...

D-Link DSL2730U router restricted telnet shell command whitelisting bypass

Overview D-Link DSL2730U routers contain a restricted telnet shell with limited allowed commands. An authenticated attacker can chain unauthorized commands through authorized commands in order to bypass the command whitelisting. Description CWE-78: Improper Neutralization of Special Elements used...

[Patator Brute Forcer] v 0.4

Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage. Currently it supports the following modules: ftplogin : Brute-force FTP sshlogin : Brute-force SSH telnetlogin : Brute-force Telnet smtplogin : Brute-force SMTP smtpvrfy : Enumerate valid users using the SMTP VRF...

OpenSSH 6.0p1 Backdoor Patch 1.2 Vulnerability 0day

This patch is for openssh-6.0p1 source which combines a known openssh backdoor and Sebastian Krahmer's openssh.reverse capabilities. Telnet to target openssh server and issue udcgamaimagic string for getting reverse openssh connection. $id: udc-hackssh-v3bajaulaut-v1, 2012/10/28 05:00:50 slash...

Lantronix Remote Configuration Protocol Password Disclosure

Lantronix Devices are prone to a Password Disclosure via the remote configuration protocol. It was possible to retrieve the setup record from Lantronix devices via the config port 30718/udp or 30718/tcp, enabled by default and to extract the Telnet/HTTP password. Copyright C 2012 Greenbone Networ...

Lantronix Telnet Password Recovery

This module retrieves the setup record from Lantronix serial-to-ethernet devices via the config port 30718/udp, enabled by default and extracts the telnet password. It has been tested successfully on a Lantronix Device Server with software version V5.8.0.1. This module requires Metasploit:...

QNX QCONN Remote Command Execution

Title : QNX QCONN Remote Command Execution Vurnerability Version : QNX 6.5.0 = , QCONN = 1.4.207944 Download: http://www.qnx.com/download/feature.html?programid=23665 QNX Neutrino 6.5.0 SP1 Vendor : http://www.qnx.com Date : 2012/09/09 CVE : N/A Exploit Author : Mor!p3rmoriperatgmail.com import...

QNX 6.5.0 QCONN 1.4.207944 - Remote Command Execution

QNX 6.5.0 QCONN 1.4.207944 - Remote Command Execution Title : QNX QCONN Remote Command Execution Vurnerability Version : QNX 6.5.0 = , QCONN = 1.4.207944 Download: http://www.qnx.com/download/feature.html?programid=23665 QNX Neutrino 6.5.0 SP1 Vendor : http://www.qnx.com Date : 2012/09/09 CVE : N...

QNX 6.5.0 / QCONN 1.4.207944 - Remote Command Execution

Title : QNX QCONN Remote Command Execution Vurnerability Version : QNX 6.5.0 = , QCONN = 1.4.207944 Download: http://www.qnx.com/download/feature.html?programid=23665 QNX Neutrino 6.5.0 SP1 Vendor : http://www.qnx.com Date : 2012/09/09 CVE : N/A Exploit Author : Mor!p3rmoriperatgmail.com import...

Fedora Core 3 : krb5-1.3.6-5 (2005-270)

Updated krb5 packages which fix two buffer overflow vulnerabilities in the included Kerberos-aware telnet client are now available. Kerberos is a networked authentication system which uses a trusted third-party a KDC to authenticate clients and servers to each other. The krb5-workstation package...

Slackware Advisory SSA:2005-210-01 telnet client

The remote host is missing an update as announced via advisory SSA:2005-210-01. OpenVAS Vulnerability Test $Id: esoftslkssa200521001.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

Slackware: Security Advisory (SSA:2010-305-03)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware: Security Advisory (SSA:2005-210-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware: Security Advisory (SSA:2004-238-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2012-4879

The Linux Console on the WAGO I/O System 758 model 758-870, 758-874, 758-875, and 758-876 Industrial PC IPC devices has a default password of wago for the 1 root and 2 admin accounts, 3 a default password of user for the user account, and 4 a default password of guest for the guest account, which...

GLSA-201208-02 : Puppet: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201208-02 Puppet: Multiple vulnerabilities Multiple vulnerabilities have been found in Puppet: Puppet uses predictable file names for temporary files CVE-2012-1906. REST requests for a file in a remote filebucket are not handled...

Puppet: Multiple vulnerabilities

Background Puppet is a system configuration management tool written in Ruby. Description Multiple vulnerabilities have been found in Puppet: Puppet uses predictable file names for temporary files CVE-2012-1906. REST requests for a file in a remote filebucket are not handled properly by overriding...

openSUSE: Security Advisory for krb5-appl (openSUSE-SU-2012:0019-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SuSE Update for krb5-appl openSUSE-SU-2012:0051-1 (krb5-appl)

Check for the Version of krb5-appl OpenVAS Vulnerability Test $Id: gbsuse201200511.nasl 8273 2018-01-03 06:29:19Z teissa $ SuSE Update for krb5-appl openSUSE-SU-2012:0051-1 krb5-appl Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...