8145 matches found
[Full-Disclosure] Benchmark Designs' WHM Autopilot backdoor vulnerability to plain-text password.
Subject: Benchmark Designs' WHM Autopilot Probably all versions up to 2.4.5 vulerable to plain-text credential leakage via backdoor. Preamble: Benchmark Designs' WHM Autopilot is a client management system made for webhosts, in order to simplify webhosting business management. It manages CPanel...
eSeSIX Thintune backdoor
Backdoor on port TCP/25702, it's possible to obtain ICA and RDP usernames/passwords...
[Full-Disclosure] backdoor menu on conexant chipset dsl router (Zoom X3)
i have just installed an adsl modem sold under the brand of Zoom X3 http://www.zoom.com/products/adsloverview.html and was apalled to find that an nmap scan of the external address immediately came up with the following: PORT STATE SERVICE 23/tcp open telnet 80/tcp open http 254/tcp open unknown...
W32.Dabber Worm Detection
The W32.Dabber worm is listening on this port. W32.Dabber propagates by exploiting a vulnerability in the FTP server component of W32.Sasser.Worm and its variants. It installs a backdoor on infected hosts and tries to listen on port 9898. If the attempt fails, it tries to listen on ports 9899...
NetGear WG602 backdoor account
Backdoor account 'super' with password '5777364' allow web interface access...
Korgo Worm Detection
Nessus found that TCP ports 113 and 3067 are open. The Korgo worm is known to open a backdoor on these ports. It propagates by exploiting the LSASS vulnerability on TCP port 445 as described in Microsoft Security Bulletin MS04-011 Note that Nessus did not try to talk to the backdoor, so this migh...
[Full-Disclosure] NEW backdoor in X-Micro WLAN 11b Broadband Router
Backdoor in the X-Micro WLAN 11b Broadband Router ALL VERSIONS ARE AFFECTED 1.6.0.1 too Previous bugreport's bugtraq id: 10095 FCC ID: RAFXWL-11BRRG Firmware Version: 1.2.2, 1.2.2.3, 1.2.2.4, 1.6.0.0, 1.6.0.1 Remote: yes, easily expoitable Type: administration password, which always works The...
X-Micro WLAN backdoor account
Built-in account 'super' wirh password 'super' or '1502' with password '1502'...
XMicro.backdoor2.txt
Backdoor in the X-Micro WLAN 11b Broadband Router ALL VERSIONS ARE AFFECTED 1.6.0.1 too Previous bugreport's bugtraq id: 10095 FCC ID: RAFXWL-11BRRG Firmware Version: 1.2.2, 1.2.2.3, 1.2.2.4, 1.6.0.0, 1.6.0.1 Remote: yes, easily expoitable Type: administration password, which always works The...
Backdoor in X-Micro WLAN 11b Broadband Router
Backdoor in the X-Micro WLAN 11b Broadband Router FCC ID: RAFXWL-11BRRG Firmware Version: 1.2.2, 1.2.2.3 probably others too Remote: yes, easily expoitable Type: administration password, which always works The following username and password works in every case, even if you set an other password ...
Cisco WLSE/HSE backdoor account
There hardcoded username/password to access device...
Agobot.FO Backdoor Detection
The remote host has the Agobot.FO backdoor installed. This backdoor is known to: - Scan local networks for common Microsoft vulnerabilities. - Scan local networks for exploitable DameWare systems. - Brute force local Microsoft machine User accounts. - Connect to an IRC channel and setup a BOT for...
Open the WS_FTP Server backdoor to SYSTEM
Advisory Name: Open the WSFTP Server backdoor to SYSTEM Impact : Privilege escalation Discovered by: Hugh Mann [email protected] Tested progs : Ipswitch WSFTP Server 4.0.2.EVAL Description Any local user or any remote user who can execute programs on the FTP server as any user can start progra...
CVE-2004-1884
Ipswitch WSFTP Server 4.0.2 has a backdoor XXSESSMGRYY username with a default password, which allows remote attackers to gain access...
wsftp402eval3.txt
Advisory Name: Open the WSFTP Server backdoor to SYSTEM Impact : Privilege escalation Discovered by: Hugh Mann [email protected] Tested progs : Ipswitch WSFTP Server 4.0.2.EVAL Description Any local user or any remote user who can execute programs on the FTP server as any user can start progra...
PT-2004-2783 · Ipswitch · Ipswitch Ws Ftp Server
Name of the Vulnerable Software and Affected Versions: Ipswitch WS FTP Server version 4.0.2 Description: The issue allows remote attackers to gain access due to a backdoor with the XXSESS MGRYY username that has a default password. Recommendations: For Ipswitch WS FTP Server version 4.0.2, change...
CVE-2004-0260
The CVE-2004-0260 entry concerns CactuSoft CactuShop 5.0 Lite. The AddToMailingList function contains a backdoor that enables remote attackers to delete arbitrary files by supplying an email address that starts with |||. Public references in NVD describe the backdoor behavior, and connected recor...
CVE-2004-0260
The AddToMailingList function in CactuSoft CactuShop 5.0 Lite contains a backdoor that allows remote attackers to delete arbitrary files via an email address that starts with |||...
APC 9606 SmartSlot Web/SNMP management card "backdoor"
Background: APC American Power Conversion SmartSwitch and UPS uninterruptible power supply products have a Web and SNMP management card installed that permits local serial console, TELNET, web and SNMP management, monitoring and mains power control of attached devices. The Problem: APC SmartSlot...