Authentication flaw

Advantage Century Telecommunication ACT P202S IP Phone 1.01.21 running firmware 1.1.21 has multiple undocumented ports available, which 1 might allow remote attackers to obtain sensitive information, such as memory contents and internal operating-system data, by directly accessing the VxWorks WDB...

CVE-2006-0374

Advantage Century Telecommunication ACT P202S IP Phone 1.01.21 running firmware 1.1.21 has multiple undocumented ports available, which 1 might allow remote attackers to obtain sensitive information, such as memory contents and internal operating-system data, by directly accessing the VxWorks WDB...

[Full-disclosure] Clipcomm CPW-100E VoIP wireless handset phone open debug service TCP/60023

I disclosed the following issue at ShmooCon 2006 http://www.shmoocon.org/ during my "VoIP Wireless Phone Security Analysis" presentation. Thanks, --scm =============================================================== DATE: 16 January, 2006 VENDOR: Clipcomm VENDOR NOTIFIED: 14 December, 2005 PRODUC...

[Full-disclosure] ZyXel P2000W (Version 2) VoIP wireless phone undocumented port UDP/9090

I disclosed the following issue at ShmooCon 2006 http://www.shmoocon.org/ during my "VoIP Wireless Phone Security Analysis" presentation. Thanks, --scm =============================================================== DATE: 16 January, 2006 VENDOR NOTIFIED: 7 December, 2005 VENDOR: Zyxel PRODUCT:...

[Full-disclosure] ACT P202S VoIP wireless phone multiple undocumented ports/services

I disclosed the following issues at ShmooCon 2006 http://www.shmoocon.org/ during my "VoIP Wireless Phone Security Analysis" presentation. Thanks, --scm =============================================================== DATE: 16 January, 2006 VENDOR: ACT – Advantage Century Telecommunication...

Default credentials

Cisco Security Monitoring, Analysis and Response System CS-MARS before 4.1.3 has an undocumented administrative account with a default password, which allows local users to gain privileges via the expert command...

Multiple Cisco Security Monitoring, Analysis and Response System (CS-MARS) backdoors

Undocumented account 'pnadmin' with standard password allows remote access to device. Undocumented 'expert' command allow unprivileged user to gain 'root' privileges...

CVE-2002-2142

Technical details (affected products, versions, root cause, remediation) are not publicly provided in the connected documents; monitor for updates.

CVE-2002-2142

An undocumented extension for the Servlet mappings in the Servlet 2.3 specification, when upgrading to WebLogic Server and Express 7.0 Service Pack 1 from BEA WebLogic Server and Express 6.0 through 7.0.0.1, does not prepend a "/" character in certain URL patterns, which prevents the proper...

Planet switches backdor account

There is undocumented 'admin' account with 'ISPMODE' password...

CVE-2005-2583

Mentor ADSL-FR4II router running firmware 2.00.0111 has an undocumented web server running on TCP port 5678, which allows local users to gain access...

CVE-2005-2583

Mentor ADSL-FR4II router running firmware 2.00.0111 has an undocumented web server running on TCP port 5678, which allows local users to gain access...

Multiple Mentor ADSL router vulnerabilities

Undocumented Web-interface TCP/5678, no passwords in default configuration, DoS, cleartext passwords in configuration file...

Enterasys Vertical Horizon switches backdoor accounts

There is undocumented backdoor account tiger/tiger123, in addition some privileged control character combination are available to unprivileged user from console or telnet session...

enterasys.txt

Problem Description An undocumented account with a default password exists, additionally guest users can DoS the switch. 2. Tested systems The following versions were tested and found vulnerable: Vertical Horizon VH-2402S with firmware 02.05.00 Vertical Horizon VH-2402S with firmware 02.05.09.07...

Asante FM2008 10/100 Ethernet switch backdoor login

The Asante FM2008 is an 8 port managed Ethernet 10/100 switch. It may be managed, like many others in its device class, by Telnet, by serial port, by HTTP, or by SNMP. Also like most similar devices, the serial port, HTTP, and Telnet access methods require one to provide username/password...

CVS information leak

By using undocumented -X key for 'cvs history' command it's possible to check existance of system files...

Netgear WG602 Accesspoint vulnerability

KHAMSIN Security News KSN Reference: 2004-06-03 0001 TIP --------------------------------------------------------------------------- Title ----- The Netgear WG602 Accesspoint contains an undocumented administrative account. Date ---- 2004-06-03 Description ----------- The webinterface which is...

SUN jdk crossite scripting

jdk undocumented static variable may allow data exchange between sites...

[Full-Disclosure] Megabook 2.0 -XSS & UA execution

------------------------------------------------------------------ - EXPL-A-2003-011 exploitlabs.com Advisory 011 ------------------------------------------------------------------ -= MegaBook =- exploitlabs.com June 29, 2003 Vunerabilitys: ---------------- 1. XSS and Unchecked Input Length 2...