PT-2015-2231

Name of the Vulnerable Software and Affected Versions Cisco NX-OS versions 4.12E11f through 7.20ZN99.67 Description The issue is related to the implementation of the banner MOTD in Cisco NX-OS, which allows remote attackers to cause a denial of service login process reset via an unspecified...

Medusa - Speedy, Parallel and Modular Login Brute-Forcer

Medusa is intended to be a speedy, massively parallel, modular, login brute-forcer. The goal is to support as many services which allow remote authentication as possible. The author considers following items as some of the key features of this application: Thread-based parallel testing. Brute-for...

CVE-2015-3939

Directory traversal vulnerability in the NC854 and NC856 modules for IDS RTU 850C devices allows remote authenticated users to read arbitrary files via unspecified vectors involving an internal web server, as demonstrated by reading a TELNET credentials file...

Directory traversal

Directory traversal vulnerability in the NC854 and NC856 modules for IDS RTU 850C devices allows remote authenticated users to read arbitrary files via unspecified vectors involving an internal web server, as demonstrated by reading a TELNET credentials file...

CVE-2015-3939

Directory traversal vulnerability in the NC854 and NC856 modules for IDS RTU 850C devices allows remote authenticated users to read arbitrary files via unspecified vectors involving an internal web server, as demonstrated by reading a TELNET credentials file...

CVE-2015-3939

CVE-2015-3939 describes a directory traversal vulnerability in the NC854 and NC856 modules of the IDS RTU 850C devices. The root cause is improper path handling in an internal web server, allowing remote authenticated users to read arbitrary files (demonstrated by TELNET credentials). Affected pr...

Unix / Linux - Local Users Information : Passwords Never Expire

Using the supplied credentials, Nessus was able to list local users that are enabled and whose passwords never expire. TRUSTED...

Vulnerability-Riddled Drug Pumps Open to Takeover

One medical device company’s line of drug pumps is so fraught with vulnerabilities that the researcher that discovered the flaws claims the pump is the least secure IP-enabled device he’s ever come across. Certain versions of Hospira’s Lifecare PCA3 Drug Infusion pumps are susceptible to multiple...

[SECURITY] Fedora 21 Update: mingw-curl-7.42.0-1.fc21

cURL is a tool for getting files from HTTP, FTP, FILE, LDAP, LDAPS, DICT, TELNET and TFTP servers, using any of the supported protocols. cURL is designed to work without user interaction or any kind of interactivity. cURL offers many useful capabilities, like proxy support, user authentication, F...

Hospira Lifecare PCA Infusion Pump Arbitrary Command Execution Vulnerability

Hospira Lifecare PCA infusion pump is a suite of smart infusion pump software from Hospira USA. Failure to perform authentication for Telnet sessions in Hospira Lifecare PCA infusion pumps running SW ver 412 allows a remote attacker to gain root privileges by accessing the telnet service...

Authentication flaw

The communication module on the Hospira LifeCare PCA Infusion System before 7.0 does not require authentication for root TELNET sessions, which allows remote attackers to modify the pump configuration via unspecified commands...

CVE-2015-3459: Undefined Security Weakness

The communication module on the Hospira LifeCare PCA Infusion System before 7.0 does not require authentication for root TELNET sessions, which allows remote attackers to modify the pump configuration via unspecified commands...

PT-2015-1287

Name of the Vulnerable Software and Affected Versions Hospira LifeCare PCA Infusion System versions prior to 7.0 Description The issue concerns the lack of authentication for Telnet sessions on the communication module of the affected device. This allows a remote attacker to gain control over the...

Red Hat Enterprise Linux Data Compromise

The vulnerability of the telnet-0.17 package of the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

Red Hat Linux Data Compromise

The vulnerability of the telnet-server-0.17.6x-18 package of the Red Hat Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

Red Hat Linux Data Compromise

The vulnerability of the telnet-server-0.17 package of the Red Hat Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

Red Hat Linux Data Compromise

The vulnerability of the telnet-0.17 package of the Red Hat Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

Debian GNU/Linux Remote Compromise Protected Information

The multiple vulnerabilities in the telnet package of the Debian GNU/Linux operating system may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...

Red Hat Enterprise Linux Data Compromise

The vulnerability of the telnet-server-0.17 package for the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

Red Hat Linux Data Compromise

The vulnerability of the telnet-0.17.6x-18 package of the Red Hat Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...