LinkSys Wireless-G administrative access

Web administration interface is available from external network even if turned off administratively...

[NEWS] SMC Routers Passwordless Remote Administration

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

SMCwhoops.txt

Tested Model: 7008ABR part number 750.9814 with firmware 1.032 installed Confirmed by another person on: 7004VBR version 1, firmware 1.231 Others may be vulnerable. SMC broadband routers ship with remote administration enabled by default on their port 1900 on the WAN side of the router. If you ju...

CVE-2004-1976

SMC Barricade broadband router 7008ABR and 7004VBR enable remote administration by default, which allows remote attackers to gain access by connecting to port 1900...

SurgeLDAP10.txt

SurgeLDAP 1.0g Web service user.cgi File retrieval Release Date: April 13, 2004 Severity: Low Vendor: http://netwinsite.com Details: SurgeLDAP is an advanced easy to manage and install high performance LDAP v3 server. It supports any number of schemas, easy to add/modify existing schemas,...

Backdoor in X-Micro WLAN 11b Broadband Router

Backdoor in the X-Micro WLAN 11b Broadband Router FCC ID: RAFXWL-11BRRG Firmware Version: 1.2.2, 1.2.2.3 probably others too Remote: yes, easily expoitable Type: administration password, which always works The following username and password works in every case, even if you set an other password ...

XMicro.backdoor.txt

Backdoor in the X-Micro WLAN 11b Broadband Router FCC ID: RAFXWL-11BRRG Firmware Version: 1.2.2, 1.2.2.3 probably others too Remote: yes, easily expoitable Type: administration password, which always works The following username and password works in every case, even if you set an other password ...

LinBit Technologies LINBOX Officeserver - Remote Authentication Bypass

LinBit Technologies LINBOX Officeserver - Remote Authentication Bypass source: https://www.securityfocus.com/bid/10010/info It has been reported that LINBOX is prone to a remote authentication bypass vulnerability. This issue is due to a design error that would allow access to web based...

LinBit Technologies LINBOX Officeserver - Remote Authentication Bypass

source: https://www.securityfocus.com/bid/10010/info It has been reported that LINBOX is prone to a remote authentication bypass vulnerability. This issue is due to a design error that would allow access to web based administration scripts without proper authorization. This issue may allow...

CVE-2004-1865

Cross-site scripting XSS vulnerability in the administration panel in bBlog 0.7.2 allows remote authenticated users with superuser privileges to inject arbitrary web script or HTML via a blog name $blogname. NOTE: if administrators are normally allowed to add HTML by other means, e.g. through...

Vulnerabilities in News Manager Lite 2.5 & News Manager Lite administration

Title: Vulnerabilities in News Manager Lite 2.5 & News Manager Lite administration. Software: News Manager Lite 2.5 & News Manager Lite administration. Vendor: http://www.expinion.net/software/appnewsmanager.asp Impact: Disclosure of authentication information, Disclosure of user information,...

CVE-2004-1833

The admin.ib file in Borland Interbase 7.1 for Linux has default world writable permissions, which allows local users to gain database administrative privileges...

CVE-2004-0190

Symantec FireWall/VPN Appliance model 200 records a cleartext password for the password administration page, which may be cached on the administrator's local system or in a proxy, which allows attackers to steal the password and gain privileges...

IP3 Networks IP3 NetAccess Appliance - SQL Injection

IP3 Networks IP3 NetAccess Appliance - SQL Injection source: https://www.securityfocus.com/bid/9858/info The IP3 NetAccess Appliance is reported prone to a remote SQL-injection vulnerability. This issue is due to the application's failure to properly sanitize user input. This issue may allow an...

virtuanews103.txt

Software: VirtuaNews Admin Panel Vendor: http://www.virtuanews.co.uk Versions: 1.0.3 Pro Platforms: Unix/Windows Bug: Cross Site Scripting Vulnerabillity Risk: Medium Exploitation: Remote with browser Date: 19 Feb 2004 Author: Rafel Ivgi, The-Insider e-mail: [email protected] web:...

Nortel Wireless LAN Access Point 2200 Series - Denial of Service

// source: https://www.securityfocus.com/bid/9787/info Nortel Wireless LAN Access Point 2200 series appliances have been reported to be prone to a remote denial of service vulnerability. The issue is reported to present itself when a large network request is handled by one of the Wireless LAN...

Finjan SurfinGate unauthorized access

By using proxy server it's possible to obtain access to administration...

Cisco default install of IBM Director agent fails to authenticate users for remote administration

Overview Cisco IBM Director agent fails to authenticate users for remote administration. Description Cisco voice products e.g. CallManager, IP Interactive Voice Response, IP Call Center Express that run on IBM servers install IBM Director agent to provide administrative management. The default...

CVE-2003-1442

The web administration page for the Ericsson HM220dp ADSL modem does not require authentication, which could allow remote attackers to gain access from the LAN side...

CVE-2003-1515

Origo ASR-8100 ADSL Router 3.21 has an administration service running on port 254 that does not require a password, which allows remote attackers to cause a denial of service by restoring the factory defaults...