Default credentials

Microsoft Windows XP SP1 and SP2 before August 2004, and possibly other operating systems and versions, uses insecure default ACLs that allow the Authenticated Users group to gain privileges by modifying critical configuration information for the 1 Simple Service Discovery Protocol SSDP, 2...

Default credentials

The "Remember my Password" feature in MSN Messenger 7.5 stores passwords in an encrypted format under the HKEYCURRENTUSER\Software\Microsoft\IdentityCRL\Creds registry key, which might allow local users to obtain the original passwords via a program that calls CryptUnprotectData, as demonstrated ...

Geronimo Console Default Credentials

The remote host appears to be running Geronimo, an open source J2EE server from the Apache Software Foundation. The installation of Geronimo on the remote host uses the default username and password to control access to its administrative console. Knowing these, an attacker can gain control of th...

Default credentials

membership.asp in Mini-Nuke CMS System 1.8.2 and earlier does not verify the old password when changing a password, which allows remote attackers to change the passwords of other members via a lostpassnew action with a modified x parameter...

Default credentials

Cisco Security Monitoring, Analysis and Response System CS-MARS before 4.1.3 has an undocumented administrative account with a default password, which allows local users to gain privileges via the expert command...

CVE-2005-3717

The telnet daemon in UTStarcom F1000 VOIP WIFI Phone s2.0 running VxWorks 5.5.1 with kernel WIND 2.6 has a default username "target" and password "password", which allows remote attackers to gain full access to the system...

CVE-2005-3717

CVE-2005-3717 documents a vulnerability in the telnet daemon of UTStarcom F1000 VOIP WIFI Phone (S2.0) running VxWorks 5.5.1 with kernel WIND 2.6. The issue arises from a default account with username "target" and password "password", enabling remote attackers to gain full system access. Public s...

CVE-2005-3717: Undefined Security Weakness

The telnet daemon in UTStarcom F1000 VOIP WIFI Phone s2.0 running VxWorks 5.5.1 with kernel WIND 2.6 has a default username "target" and password "password", which allows remote attackers to gain full access to the system...

[Full-disclosure] UTstarcom F1000 VoIP Wifi phone multiple vulnerabilities

I disclosed today the following vulnerabilities at the 32nd CSI conference in Washington, D.C. https://www.cmpevents.com/CSI32/a.asp?option=G&V=3&id=406438 Thanks, Shawn Merdinger =============================================================== VENDOR: UTStarcom VENDOR NOTIFIED: 27 June, 2005 via...

Novell Groupwise Servlet Manager Default Credentials (HTTP)

The Novell Groupwise servlet server is configured with the default password. SPDX-FileCopyrightText: 2004 David Kyger Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Zyxel Router Default Credentials (HTTP)

The remote host is a Zyxel router with its default password set. SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Netscape Enterprise Default Administrative Password (HTTP)

This host is running the Netscape Enterprise Server. The Administrative interface for this web server, which operates on port 8888/TCP, is using the default username and password of SPDX-FileCopyrightText: 2003 Digital Defense Inc. Some text descriptions might be excerpted from a referenced...

Default password 'debug' for account 'user' (SSH/Telnet)

The account SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.17293";...

Allied Telesyn Router/Switch Default Credentials (Telnet)

The Allied Telesyn Router/Switch has default credentials set. SPDX-FileCopyrightText: 2005 Charles Thier Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Avaya P330 Stackable Switch Default Credentials (Telnet)

The Avaya P330 stackable switch has default credentials set. SPDX-FileCopyrightText: 2005 Charles Thier Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Nortel Baystack Switch Default Credentials (Telnet)

The remote switch has a weak password. SPDX-FileCopyrightText: 2003 Douglas Minderhout Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Default password 'debug' for account 'super' (SSH/Telnet)

The account SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.17291";...

3Com Superstack 3 Switch Default Credentials (Telnet)

The 3Com Superstack 3 switch has default credentials set. SPDX-FileCopyrightText: 2005 Patrik Karlsson Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft SQL (MSSQL) Server Brute Force Logins With Default Credentials (TCP/IP Listener)

The remote Microsoft SQL MSSQL Server has a common / publicly known password for one or more accounts. SPDX-FileCopyrightText: 2005 HD Moore SPDX-FileCopyrightText: New / improved code since 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C...

CVE-2004-2532: Undefined Security Weakness

Serv-U FTP server before 5.1.0.0 has a default account and password for local administration, which allows local users to execute arbitrary commands by connecting to the server using the default administrator account, creating a new user, logging in as that new user, and then using the SITE EXEC...