Microsoft Windows 2000NT 4 - RPC Locator Service Remote Overflow

Microsoft Windows 2000NT 4 - RPC Locator Service Remote Overflow / rpcexp.c RPC LOCATOR Exploit Autor: Marcin Wolak mail: [email protected] Last update: 30 march 2003 / / About Compilation: What You need to compile rpcexp.c ? 1. MS Platform SDK August SDK is sufficient. 2. Compilator f.e. MS Visual...

CVE-2001-1291

The telnet server for 3Com hardware such as PS40 SuperStack II does not delay or disconnect remote attackers who provide an incorrect username or password, which makes it easier to break into the server via brute force password guessing...

CVE-2002-0545

Cisco Aironet before 11.21 with Telnet enabled is vulnerable to a denial-of-service via rapid login attempts with invalid usernames/passwords, which can reboot the device. The CVE description and NASL entry corroborate a remote DoS by targeting Telnet login handling; no explicit patch/version rem...

CVE-2001-1291

The CVE-2001-1291 entry concerns the telnet server on 3Com PS40 SuperStack II hardware that does not delay or disconnect after incorrect username/password attempts, enabling easier brute‑force access. Connected PT-2001-2418 notes affected versions are not specified, and there is no documented fix...

CVE-2002-0545

Cisco Aironet before 11.21 with Telnet enabled allows remote attackers to cause a denial of service reboot via a series of login attempts with invalid usernames and passwords...

CVE-2002-1558

Cisco ONS15454 and ONS15327 running ONS before 3.4 have an account for the VxWorks Operating System in the TCC, TCC+ and XTC that cannot be changed or disabled, which allows remote attackers to gain privileges by connecting to the account via Telnet...

Multi-Tech ProxyServers ship with null password for administrative access

Overview Some versions of the Multi-Tech ProxyServer products ship without a default password for the administrative interface. Description Some versions of the Multi-Tech ProxyServer products ships without a default password for the administrative interface permitting unauthenticated access via...

CVE-2002-1558

Cisco ONS15454 and ONS15327 running ONS before 3.4 have an account for the VxWorks Operating System in the TCC, TCC+ and XTC that cannot be changed or disabled, which allows remote attackers to gain privileges by connecting to the account via Telnet...

CVE-2002-1558

Cisco ONS15454 and ONS15327 running ONS before 3.4 expose a non-modifiable VxWorks system account within the TCC, TCC+ and XTC, enabling remote privilege escalation by Telnet. Affected product families: Cisco ONS. Root cause: account cannot be changed or disabled, allowing non-authenticated or lo...

Nortel Baystack Default Password

The remote switch has a weak password. This means that anyone who has downloaded a user manual can telnet to it and gain administrative access. This script was written by Douglas Minderhout This script is based uppon a script by Rui Bernardino See the Nessus Scripts License for details Changes by...

MS02-004: Microsoft Telnet Server Protocol Option Handling Remote Overflow (307298) (intrusive check)

The remote telnet server appears to be Microsoft's telnet server. It is possible to crash the remote service when it receives too many options, probably because of a buffer overflow. An attacker may use this flaw to deny service to legitimate users, or execute arbitrary code on the remote host...

Motorola Vanguard with No Password (telnet check)

This device is a Motorola Vanguard router and has no password set. An attacker can reconfigure this device without providing any authentication. This script was written by Geoff Humes See the Nessus Scripts License for details Changes by Tenable: - Revised plugin title 9/2/09 - Revised plugin tit...

Nortel/Bay Networks/Xylogics Annex Default Password

The remote terminal server has the default password set. This means that anyone who has downloaded a user manual can telnet to it and gain administrative access. If modems are attached to this terminal server, it may allow unauthenticated, remote access to the network. This script was written by...

CVE-2002-0629

The Telnet service for Polycom ViewStation before 7.2.4 allows remote attackers to cause a denial of service crash via multiple connections to the server...

CVE-2002-0628

The Telnet service for Polycom ViewStation before 7.2.4 does not restrict the number of failed login attempts, which makes it easier for remote attackers to guess usernames and passwords via a brute force attack...

CVE-2002-0630

The Telnet service for Polycom ViewStation before 7.2.4 allows remote attackers to cause a denial of service crash via long or malformed ICMP packets...

CVE-2002-0629

Technical details about CVE-2002-0629 are not publicly available in the provided documents. Monitor for updates.

CVE-2002-0629

The Telnet service for Polycom ViewStation before 7.2.4 allows remote attackers to cause a denial of service crash via multiple connections to the server...

CVE-2002-0628

The Telnet service for Polycom ViewStation before 7.2.4 does not restrict the number of failed login attempts, which makes it easier for remote attackers to guess usernames and passwords via a brute force attack...

CVE-2002-0628

The issue affects Polycom ViewStation Telnet service prior to version 7.2.4. The Telnet implementation does not restrict failed login attempts, enabling brute‑force guesses of usernames and passwords. Impact is described as remote authentication bypass via brute force. A fix is available: upgrade...