1165 matches found
Airtel ADSL modems backdoor
Undocumented accounts 'user' and 'support'...
Akamai Download Manager ActiveX code execution
Undocumented properties allow code download and execute...
Code injection
The Akamai Download Manager aka DLM or dlmanager ActiveX control DownloadManagerV2.ocx before 2.2.3.5 allows remote attackers to force the download and execution of arbitrary code via unspecified "undocumented object parameters."...
Aztech ADSL routers backdoor
It's possible to obtain administrative access with undocumented account isp/isp...
NetGear ReadyNAS RAIDiator default password
There are 3 default account, one of which is undocumented with root access...
Multiple SAP Internet Graphics Service security vulnerabilities
File removal, insecure undocumented features, buffer overflow, crossite scripting...
Low: Red Hat Security Advisory: util-linux security and bug fix update
An updated util-linux package that corrects a security issue and fixes several bugs is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The util-linux package contains a collection of basic system utilities. A flaw was found in the way...
Project Server 2003 - Credential Disclosure
============================================================== Project Server 2003 - Credential Disclosure [email protected] ============================================================== Microsoft Project server 2003 implements a thick client for some of the functionality. The...
CYBSEC - Security Pre-Advisory: SAP Internet Graphics Service (IGS) Undocumented Features
The following pre-advisory is also available in PDF format for download at: http://www.cybsec.com/vuln/CYBSEC-SecurityPre-AdvisorySAPIGSUndocumentedFeatures.pdf CYBSEC S.A. www.cybsec.com Pre-Advisory Name: SAP Internet Graphics Service IGS Undocumented Features ================== Vulnerability...
[Full-disclosure] (0-Day) PolyCom IP-301 VoIP Desktop Phone HTTP server DoS and undocumented TCP port 42
Title: PolyCom IP-301 VoIP Desktop Phone HTTP server DoS and undocumented TCP port 42 Version: 1.4.1.0040 Issues: 1.Phone reboots from the Nessus httpfingerprintinghmap.nasl script. 2.Phone reboots from a long URL sent to the HTTP daemon 3.Undocumented open port TCP/42 returns “Halt! Who goes...
CVE-2006-3285
The internal database in Cisco Wireless Control System WCS for Linux and Windows before 3.251 uses an undocumented, hard-coded username and password, which allows remote authenticated users to read, and possibly modify, sensitive configuration data aka bugs CSCsd15955...
Mac OS X 10.4.x < 10.4.5 Kernel Undocumented System Call Local DoS
The remote host is running a version of Mac OS X 10.4.x that is prior to 10.4.5. Mac OS X 10.4.5 contains a security fix for a local denial of service vulnerability. A malicious local user may trigger the vulnerability by invoking an undocumented system call. C Tenable Network Security, Inc. if !...
Information disclosure
Apple Mac OS X 10.4.5 and allows local users to cause a denial of service crash via an undocumented system call...
CVE-2006-0382
Apple Mac OS X 10.4.5 and allows local users to cause a denial of service crash via an undocumented system call...
CVE-2006-0641
Orbicule Undercover uses a third-party web server to determine the IP address through which the computer is accessing the Internet, but does not document this third-party disclosure, which leads to a potential privacy leak that might allow transmission of sensitive information to an unintended...
Authentication flaw
MPM SIP HP-180W Wireless IP Phone WE.00.17 allows remote attackers to obtain sensitive information and possibly cause a denial of service via a direct connection to UDP port 9090, which is undocumented and does not require authentication...
Authentication flaw
Advantage Century Telecommunication ACT P202S IP Phone 1.01.21 running firmware 1.1.21 has multiple undocumented ports available, which 1 might allow remote attackers to obtain sensitive information, such as memory contents and internal operating-system data, by directly accessing the VxWorks WDB...
CVE-2006-0374
Advantage Century Telecommunication ACT P202S IP Phone 1.01.21 running firmware 1.1.21 has multiple undocumented ports available, which 1 might allow remote attackers to obtain sensitive information, such as memory contents and internal operating-system data, by directly accessing the VxWorks WDB...
[Full-disclosure] Clipcomm CPW-100E VoIP wireless handset phone open debug service TCP/60023
I disclosed the following issue at ShmooCon 2006 http://www.shmoocon.org/ during my "VoIP Wireless Phone Security Analysis" presentation. Thanks, --scm =============================================================== DATE: 16 January, 2006 VENDOR: Clipcomm VENDOR NOTIFIED: 14 December, 2005 PRODUC...
[Full-disclosure] ZyXel P2000W (Version 2) VoIP wireless phone undocumented port UDP/9090
I disclosed the following issue at ShmooCon 2006 http://www.shmoocon.org/ during my "VoIP Wireless Phone Security Analysis" presentation. Thanks, --scm =============================================================== DATE: 16 January, 2006 VENDOR NOTIFIED: 7 December, 2005 VENDOR: Zyxel PRODUCT:...