UTStarcom B-NAS 1000 / B-RAS 1000 Major Security Flaw

== Overview == UTStarcom http://www.ustar.com is a broadband DSLAM and DSL SMS hardware vendor. Their products are used to manage DSL through PPPoE, PPPoA, bridge mode etc. == Vulnerability == The vendor UTStarcom has placed 2 backdoor accounts with full system access in their BAS-1000 system B-R...

Utstarcom backdoor

Builtin priveleged accounts field/field and guru/3nouguru...

solaris lpd thing

I'm going through a rough period in my life -- I don't know what to do. Attached below is a shitty remote that I leaked to the kids last year. Now is a good time to submit it to Bugtraq. It's incredibly lame code, but why not get it working, and then go hack some stuff... Originally it was writte...

RemotelyAnywhere WWW Detection

A RemotelyAnywhere WWW server is running on the remote host. According to NAVCIRT, attackers use this management tool as a backdoor. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Script audit and contributions from Carmichael Security Erik Anderson nb: domain no longer exists Broken link...

Gator installer Plugin allows any software to be installed

Advisory Title: Gator installer Plugin allows any software to be installed Release Date: 21/01/2002 Application: Gator installer plugin for Internet Explorer GAIN Platform: Windows clients with Internet Explorer. DLL version - 3.0.6.1 Severity: Malicious users can install backdoor software and ga...

W3M 0.1/0.2 - Malformed MIME Header Buffer Overflow

source: https://www.securityfocus.com/bid/2895/info W3M is a pager/text-based WWW browser similiar to lynx. A buffer overflow vulnerability exists in the 'w3m' client program. The overflow occurs when a base64-encoded string exceeding approximately 32 characters in length is received in a MIME...

CVE-2001-0157

Debugging utility in the backdoor mode of Palm OS 3.5.2 and earlier allows attackers with physical access to a Palm device to bypass access restrictions and obtain passwords, even if the system lockout mechanism is enabled...

CVE-2001-0008

Backdoor account in Interbase database server allows remote attackers to overwrite arbitrary files using stored procedures...

CVE-2001-0008

Interbase servers (Borland/Inprise Interbase 4.x/5.x and Open Source Interbase 6.x; Firebird 0.9-3 and earlier) contain a compiled‑in backdoor account with a fixed password that can be used by any user to manipulate database objects via port 3050/tcp and potentially overwrite files. The CERT/CA a...

Winamp 2.73 buffer overflow

I recently found a buffer overflow in Winamp 2.73, it's in the way it parses .AIP files... These files are set to download without a download confirmation, like m3u & pls, so they pose a security threat... actually such exploits make winamp a backdoor A demonstration of how the EIP can be snatche...

ALCATEL Speed Touch PRO port redirect exploit

Taking advantage from the ALCATEL Speed Touch Pro backdoor and configuration problems, it is possible to obtain a "full priv" access to the router and launch several attack against the internal LAN thanks to the NAT/PAT feature often made available. If the router is "telnetable" it means that "ip...

FreeBSD-SA-01:26.interbase

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:26 Security Advisory FreeBSD, Inc. Topic: interbase contains remote backdoor Category: ports Module: interbase Announced: 2001-03-12 Credits: Firebird project Affects:...

CVE-2001-0008

Backdoor account in Interbase database server allows remote attackers to overwrite arbitrary files using stored procedures...

BorlandInprise Interbase 4.05.06.0 - Backdoor Password

BorlandInprise Interbase 4.05.06.0 - Backdoor Password source: https://www.securityfocus.com/bid/2192/info Interbase is an open source relational database offered by Borland Inprise Corporation. Interbase contains a backdoor user account and password called "LOCKSMITH". When accessed this account...

Borland/Inprise Interbase SQL database server contains backdoor superuser account with known password

Overview Description Interbase is an open source database package that is distributed by Borland/Inprise. The server contains a compiled-in backdoor account with a known password.In the following interbase code, references are made about a LOCKSMITH user: ./jrd/dyn.e ./jrd/isc.c ./jrd/jrd.c...

Borland/Inprise Interbase 4.0/5.0/6.0 - Backdoor Password

source: https://www.securityfocus.com/bid/2192/info Interbase is an open source relational database offered by Borland Inprise Corporation. Interbase contains a backdoor user account and password called "LOCKSMITH". When accessed this account will eliminate all implemented security allowing full...

CVE-2000-1230

Backdoor in auth.php3 in Phorum 3.0.7 allows remote attackers to access restricted web pages via an HTTP request with the PHPAUTHUSER parameter set to "boogieman"...

CVE-2000-0988

WinU 1.0 through 5.1 has a backdoor password that allows remote attackers to gain access to its administrative interface and modify configuration...

CVE-2000-0988

WinU 1.0 through 5.1 has a backdoor password that allows remote attackers to gain access to its administrative interface and modify configuration...

CVE-2000-0988

WinU 1.0–5.1 is affected by a backdoor password that enables remote attackers to access the administrative interface and modify configuration. The NVD entry describes an unauthenticated, remote-access flaw that provides complete administration capability without user interaction, enabling modific...