BitchX Trojaned Distribution Authentication Bypass

Binary data 1859.prm...

Trojan/Backdoor - Apache mod_rootme Detection

Binary data 1238.prm...

Trojan/Backdoor - PhatBOT Detection

Binary data 1202.prm...

Trojan/Backdoor - DeepThroat Detection

Binary data 1910.prm...

[Full-Disclosure] Benchmark Designs' WHM Autopilot backdoor vulnerability to plain-text password.

Subject: Benchmark Designs' WHM Autopilot Probably all versions up to 2.4.5 vulerable to plain-text credential leakage via backdoor. Preamble: Benchmark Designs' WHM Autopilot is a client management system made for webhosts, in order to simplify webhosting business management. It manages CPanel...

Zincite.A (MyDoom.M) Backdoor Detection

The backdoor 'BackDoor.Zincite.A' is installed on the remote host. It has probably been installed by the 'MyDoom.M' virus. This backdoor may allow an attacker to gain unauthorized access on the remote host. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid14184;...

eSeSIX Thintune backdoor

Backdoor on port TCP/25702, it's possible to obtain ICA and RDP usernames/passwords...

[Full-Disclosure] backdoor menu on conexant chipset dsl router (Zoom X3)

i have just installed an adsl modem sold under the brand of Zoom X3 http://www.zoom.com/products/adsloverview.html and was apalled to find that an nmap scan of the external address immediately came up with the following: PORT STATE SERVICE 23/tcp open telnet 80/tcp open http 254/tcp open unknown...

W32.Dabber Worm Detection

The W32.Dabber worm is listening on this port. W32.Dabber propagates by exploiting a vulnerability in the FTP server component of W32.Sasser.Worm and its variants. It installs a backdoor on infected hosts and tries to listen on port 9898. If the attempt fails, it tries to listen on ports 9899...

NetGear WG602 backdoor account

Backdoor account 'super' with password '5777364' allow web interface access...

Korgo Worm Detection

Nessus found that TCP ports 113 and 3067 are open. The Korgo worm is known to open a backdoor on these ports. It propagates by exploiting the LSASS vulnerability on TCP port 445 as described in Microsoft Security Bulletin MS04-011 Note that Nessus did not try to talk to the backdoor, so this migh...

[Full-Disclosure] NEW backdoor in X-Micro WLAN 11b Broadband Router

Backdoor in the X-Micro WLAN 11b Broadband Router ALL VERSIONS ARE AFFECTED 1.6.0.1 too Previous bugreport's bugtraq id: 10095 FCC ID: RAFXWL-11BRRG Firmware Version: 1.2.2, 1.2.2.3, 1.2.2.4, 1.6.0.0, 1.6.0.1 Remote: yes, easily expoitable Type: administration password, which always works The...

X-Micro WLAN backdoor account

Built-in account 'super' wirh password 'super' or '1502' with password '1502'...

XMicro.backdoor2.txt

Backdoor in the X-Micro WLAN 11b Broadband Router ALL VERSIONS ARE AFFECTED 1.6.0.1 too Previous bugreport's bugtraq id: 10095 FCC ID: RAFXWL-11BRRG Firmware Version: 1.2.2, 1.2.2.3, 1.2.2.4, 1.6.0.0, 1.6.0.1 Remote: yes, easily expoitable Type: administration password, which always works The...

Backdoor in X-Micro WLAN 11b Broadband Router

Backdoor in the X-Micro WLAN 11b Broadband Router FCC ID: RAFXWL-11BRRG Firmware Version: 1.2.2, 1.2.2.3 probably others too Remote: yes, easily expoitable Type: administration password, which always works The following username and password works in every case, even if you set an other password ...

Cisco WLSE/HSE backdoor account

There hardcoded username/password to access device...

Agobot.FO Backdoor Detection

The remote host has the Agobot.FO backdoor installed. This backdoor is known to: - Scan local networks for common Microsoft vulnerabilities. - Scan local networks for exploitable DameWare systems. - Brute force local Microsoft machine User accounts. - Connect to an IRC channel and setup a BOT for...

Open the WS_FTP Server backdoor to SYSTEM

Advisory Name: Open the WSFTP Server backdoor to SYSTEM Impact : Privilege escalation Discovered by: Hugh Mann [email protected] Tested progs : Ipswitch WSFTP Server 4.0.2.EVAL Description Any local user or any remote user who can execute programs on the FTP server as any user can start progra...

CVE-2004-1884

Ipswitch WSFTP Server 4.0.2 has a backdoor XXSESSMGRYY username with a default password, which allows remote attackers to gain access...

PT-2004-2783 · Ipswitch · Ipswitch Ws Ftp Server

Name of the Vulnerable Software and Affected Versions: Ipswitch WS FTP Server version 4.0.2 Description: The issue allows remote attackers to gain access due to a backdoor with the XXSESS MGRYY username that has a default password. Recommendations: For Ipswitch WS FTP Server version 4.0.2, change...