2476 matches found
CVE-2005-3280
The CVE-2005-3280 entry concerns Paros 3.2.5, where the underlying HSQLDB database is installed with an empty password for the administrator account ('sa') and the database is accessible over the network. This allows remote attackers to connect to the database and potentially execute arbitrary co...
CVE-2005-3196
Planet Technology Corp FGSW2402RS switch with firmware 1.2 has a default password, which allows attackers with physical access to the device's serial port to gain privileges...
CVE-2005-3196
Planet Technology Corp FGSW2402RS switch with firmware 1.2 has a default password, which allows attackers with physical access to the device's serial port to gain privileges...
CVE-2005-3196
CVE-2005-3196 concerns the Planet Technology Corp FGSW2402RS switch running firmware 1.2, where a default password allows attackers with physical access to the device’s serial port to gain privileges. The affected component is the switch’s firmware authentication mechanism; the root cause is a de...
Planet Technology Corp FGSW2402RS switch default password / "backdoor"
Hello all, Today i discovered a pseudo backdoor thru a default password while trying to reset the password on a Planet Technology Corp FGSW2402RS switch. Allthough i dont consider this to be a real problem since the only access seems to be thru the serial port, i would like to share this with the...
planetBackdoor.txt
Hello all, Today i discovered a pseudo backdoor thru a default password while trying to reset the password on a Planet Technology Corp FGSW2402RS switch. Allthough i dont consider this to be a real problem since the only access seems to be thru the serial port, i would like to share this with the...
Use SERV-U to do a backdoor-a vulnerability warning-the black bar safety net
serv-u default monitor 1 2 7. 0. 0. 1:4 3 9 5 8, so only in the present machine to be connected to this management port. serv-u default administrative account is LocalAdministrator,the default password is l@$ak. lk;0@P, this password in the same version is fixed, maybe in different versions is al...
CVE-2005-2998
PHP Advanced Transfer Manager 1.30 has a default password for the administrator user, which allows remote attackers to upload and execute arbitrary PHP files...
CVE-2005-2998
CVE-2005-2998 affects PHP Advanced Transfer Manager 1.30. The vulnerability involves a default administrator password that allows remote attackers to upload and execute arbitrary PHP files. Impact is described overall as partial confidentiality, integrity, and availability. No explicit remediatio...
CVE-2005-2998
PHP Advanced Transfer Manager 1.30 has a default password for the administrator user, which allows remote attackers to upload and execute arbitrary PHP files...
Brightmail Control Center Default Password (symantec) for 'admin' Account
The remote host is running Symantec's Brightmail Control Center, a web-based administration tool for Brightmail AntiSpam. The installation of Brightmail Control Center on the remote host still has an account 'admin' with the default password 'symantec'. An attacker can exploit this issue to gain...
CVE-2005-2584
The web administration interface in Mentor ADSL-FR4II router running firmware 2.00.0111 does not set a default password, which allows local users to gain access...
CVE-2005-2584
The web administration interface in Mentor ADSL-FR4II router running firmware 2.00.0111 does not set a default password, which allows local users to gain access...
CVE-2004-2314
The Telnet listener for Novell iChain Server before 2.2 Field Patch 3b 2.2.116 does not have a password by default, which allows remote attackers to gain access...
Multiple Mentor ADSL router vulnerabilities
Undocumented Web-interface TCP/5678, no passwords in default configuration, DoS, cleartext passwords in configuration file...
Low security hole affecting Mentor's ADSLFR4II router
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I've found a number of low risk issues with Mentor's ADSLFR4II router. I initially spoke to them on the 20th July, passing them full details of my findings on the 21st of July. I then emailed them again on the 4th of August asking for an update and...
CVE-2005-2374
Belkin 54g wireless routers do not properly set an administrative password, which allows remote attackers to gain access via the 1 Telnet or 2 web administration interfaces...
Sybase EAServer WebConsole jaqadmin Default Password
This host appears to be the running the Sybase EAServer Management with the default administrator accounts still configured jagadmin/''. A potential intruder could reconfigure this service in a way that grants system access. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
CVE-2002-2020
Netgear RP114 Cable/DSL Web Safe Router Firmware 3.26 uses a default administrator password and accepts admin logins on the external interface, which allows remote attackers to gain privileges if the password is not changed...