1445 matches found
CVE-2005-3720
Hitachi WirelessIP5000 VOIP WiFi Phone 1.5.6 has a vulnerable HTTP server where the default index page exposes sensitive information (e.g., software versions). Connected sources also enumerate additional issues (e.g., unauthorized HTTP server access under factory default config and SNMP/administr...
CVE-2005-3718
Affected product: UTStarcom F1000 VOIP WIFI Phone s2.0 running VxWorks 5.5.1 with kernel WIND 2.6. Vulnerability details: The device does not allow users to disable access to (1) SNMP or (2) rlogin on TCP 513, enabling remote attackers to trigger other vulnerabilities (e.g., CVE-2005-3716) or exe...
CVE-2005-3721
CVE-2005-3721 concerns the Hitachi IP5000 VOIP WIFI Phone (firmware 1.5.6) where the HTTP server’s default configuration does not require authentication for sensitive configuration pages. This allows remote attackers to modify device configuration without credentials. The available references con...
PT-2005-4471 · Wind River +1 · Vxworks +2
Name of the Vulnerable Software and Affected Versions: UTStarcom F1000 VOIP WIFI Phone s2.0 running VxWorks 5.5.1 with kernel WIND 2.6 Description: The issue concerns hard-coded public credentials in the SNMP daemon that cannot be changed, allowing attackers to obtain sensitive information...
CVE-2005-3716: Use of Hard-coded Credentials
The SNMP daemon in UTStarcom F1000 VOIP WIFI Phone s2.0 running VxWorks 5.5.1 with kernel WIND 2.6 has hard-coded public credentials that cannot be changed, which allows attackers to obtain sensitive information...
CVE-2005-3715: Undefined Security Weakness
Senao SI-680H Wireless VoIP Phone Firmware 0.03.0839 leaves the VxWorks debugger UDP port 17185 available without authentication, which allows attackers to access the phone OS, obtain sensitive information, and cause a denial of service...
CVE-2005-3719: Undefined Security Weakness
Hitachi IP5000 VOIP WIFI Phone 1.5.6 has a hard-coded administrator password of "0000", which allows attackers with physical access to obtain sensitive information and modify the phone's configuration...
CVE-2005-3722: Undefined Security Weakness
The SNMP v1/v2c daemon in Hitachi IP5000 VOIP WIFI Phone 1.5.6 allows remote attackers to gain read or write access to system configuration using arbitrary SNMP credentials...
CVE-2005-3718: Undefined Security Weakness
UTStarcom F1000 VOIP WIFI Phone s2.0 running VxWorks 5.5.1 with kernel WIND 2.6 does not allow users to disable access to 1 SNMP or 2 the rlogin port TCP 513, which allows remote attackers to exploit other vulnerabilities such as CVE-2005-3716, or execute arbitrary shell commands via rlogin, whic...
CVE-2005-3720: Undefined Security Weakness
The default index page in the HTTP server in Hitachi IP5000 VOIP WIFI Phone 1.5.6 lists sensitive information such as software versions...
CVE-2005-3723: Undefined Security Weakness
Hitachi IP5000 VOIP WIFI Phone 1.5.6 does not allow the user to disable access to 1 SNMP or 2 TCP port 3390, which allows remote attackers to modify configuration using CVE-2005-3722, or access the Unidata Shell to obtain sensitive information or cause a denial of service...
CVE-2005-3724: Exposure of Sensitive Information to an Unauthorized Actor
Zyxel P2000W Version 1 VOIP WIFI Phone Wj.00.10 allows remote attackers to obtain sensitive information and possibly cause a denial of service via a direct connection to UDP port 9090, which is undocumented and does not require authentication...
CVE-2005-3721: Undefined Security Weakness
The default configuration of the HTTP server in Hitachi IP5000 VOIP WIFI Phone 1.5.6 does not require authentication for sensitive configuration pages, which allows remote attackers to modify configuration...
[Full-disclosure] Gadu-Gadu several vulnerabilities (version <= 7.20)
21/11/05 Gadu-Gadu instant messenger several vulnerabilities I. INTRODUCTION During the preparation of the materials about instant messengers security for the security conference we have checked current state of the Gadu-Gadu http://www.gadu-gadu.pl security. There was discovered a several new...
CVE-2005-3717: Undefined Security Weakness
The telnet daemon in UTStarcom F1000 VOIP WIFI Phone s2.0 running VxWorks 5.5.1 with kernel WIND 2.6 has a default username "target" and password "password", which allows remote attackers to gain full access to the system...
[Full-disclosure] Senao SI-680H VoIP Wifi phone undocumented open port
I disclosed today the following vulnerability at the 32nd CSI conference in Washington, D.C. https://www.cmpevents.com/CSI32/a.asp?option=G&V=3&id=406438 Thanks, Shawn Merdinger =============================================================== VENDOR: Senao VENDOR NOTIFIED: 28 June, 2005 VENDOR...
Senao SI-680H wirieless Wi-Fi VoIP phones unauthorized access
VxWorks debugger is available with UDP/17185...
Multiple UTstarcom F1000 wirieless Wi-Fi VoIP phones vulnerabilities
SNMP access, unauthenticated telnet TCP/21 and rlogin TCP/513 access...