Aastra IP Telephone hardcoded telnet admin password

Aastra IP Telephone hardcoded telnet admin password --------------------------------------------------- Affected products ================= Aastra 6753i IP Telephone Firmware Version 3.2.2.56 Firmware Release Code SIP Boot Version 2.5.2.1010 Background ========== "The 6753i from Aastra offers...

CVE-2013-0713

IPSSH aka the SSH server in Wind River VxWorks 6.5 through 6.9 allows remote authenticated users to cause a denial of service daemon outage via a crafted pty request...

CVE-2013-0714

IPSSH aka the SSH server in Wind River VxWorks 6.5 through 6.9 allows remote attackers to execute arbitrary code or cause a denial of service daemon hang via a crafted public-key authentication request...

CVE-2013-0715

The WebCLI component in Wind River VxWorks 5.5 through 6.9 allows remote authenticated users to cause a denial of service CLI session crash via a crafted command string...

CVE-2013-0711

IPSSH aka the SSH server in Wind River VxWorks 6.5 through 6.9 allows remote attackers to cause a denial of service daemon outage via a crafted authentication request...

CVE-2013-0712

IPSSH aka the SSH server in Wind River VxWorks 6.5 through 6.9 allows remote authenticated users to cause a denial of service daemon outage via a crafted packet...

CVE-2013-0716

The web server in Wind River VxWorks 5.5 through 6.9 allows remote attackers to cause a denial of service daemon crash via a crafted URI...

Cross site request forgery (csrf)

IPSSH aka the SSH server in Wind River VxWorks 6.5 through 6.9 allows remote attackers to cause a denial of service daemon outage via a crafted authentication request...

Command injection

The WebCLI component in Wind River VxWorks 5.5 through 6.9 allows remote authenticated users to cause a denial of service CLI session crash via a crafted command string...

Cross site request forgery (csrf)

IPSSH aka the SSH server in Wind River VxWorks 6.5 through 6.9 allows remote attackers to execute arbitrary code or cause a denial of service daemon hang via a crafted public-key authentication request...

Code injection

IPSSH aka the SSH server in Wind River VxWorks 6.5 through 6.9 allows remote authenticated users to cause a denial of service daemon outage via a crafted packet...

Cross site request forgery (csrf)

IPSSH aka the SSH server in Wind River VxWorks 6.5 through 6.9 allows remote authenticated users to cause a denial of service daemon outage via a crafted pty request...

Code injection

The web server in Wind River VxWorks 5.5 through 6.9 allows remote attackers to cause a denial of service daemon crash via a crafted URI...

CVE-2013-0715

The CVE-2013-0715 vulnerability affects Wind River VxWorks WebCLI in versions 5.5–6.9. The root cause is a parsing issue in the WebCLI command processing that allows remote authenticated users to cause a DoS by crashing the CLI session. Impact is CLI session termination with potential reuse of a ...

CVE-2013-0714

CVE-2013-0714 affects Wind River VxWorks 6.5–6.9 IPSSH (SSH server). A crafted public-key authentication request can cause the SSH server to hang and make SSH access unavailable until the next reboot; the vulnerability may also enable arbitrary code execution on the server. The issue is reported ...

CVE-2013-0715

The WebCLI component in Wind River VxWorks 5.5 through 6.9 allows remote authenticated users to cause a denial of service CLI session crash via a crafted command string...

CVE-2013-0713

IPSSH aka the SSH server in Wind River VxWorks 6.5 through 6.9 allows remote authenticated users to cause a denial of service daemon outage via a crafted pty request...

CVE-2013-0712

IPSSH aka the SSH server in Wind River VxWorks 6.5 through 6.9 allows remote authenticated users to cause a denial of service daemon outage via a crafted packet...

CVE-2013-0712

CVE-2013-0712 affects Wind River VxWorks IPSSH (SSH server) in versions 6.5–6.9. The DoS condition arises from a vulnerability in processing immediately after an SSH connection is established, allowing remote authenticated users to cause a denial of service (daemon outage) via a crafted packet. I...

CVE-2013-0713

CVE-2013-0713 affects Wind River VxWorks 6.5–6.9 IPSSH (SSH server). A crafted pty request can cause SSH access to be unavailable until next reboot; authenticated users may trigger this DoS. Public details confirm affected versions and the root cause (pty handling). Mitigation: apply Wind River p...