LinkSys WRT54G administration page availble to WAN

Manufacturer: LinkSys a division of Cisco Product: Wireless-G Broadband Router Model: WRT54G Product Page: http://www.linksys.com/products/product.asp?grid=33&scid=35&prid=601 Firmware tested: v2.02.7 In a recent client installation I discovered that even if the remote administration function is...

XMicro.backdoor2.txt

Backdoor in the X-Micro WLAN 11b Broadband Router ALL VERSIONS ARE AFFECTED 1.6.0.1 too Previous bugreport's bugtraq id: 10095 FCC ID: RAFXWL-11BRRG Firmware Version: 1.2.2, 1.2.2.3, 1.2.2.4, 1.6.0.0, 1.6.0.1 Remote: yes, easily expoitable Type: administration password, which always works The...

A Default Username and Password in WLSE and HSE Devices

...

Novell Groupwise Servlet Manager Default Password

The Novell Groupwise servlet server is configured with a default password. As a result, users could be denied access to mail and other servlet based resources. To test this finding: https:///servlet/ServletManager/ enter 'servlet' for the user and 'manager' for the password. This script was writt...

Default Password (swift) for 'swift' Account

The account 'swift' has the password 'swift'. An attacker may use this to gain further privileges on this system. %NASLMINLEVEL 70300 This script was shamelessly copied by Michel Arboi : GNU Public License account = "swift"; password = "swift"; include'deprecatednasllevel.inc'; include'compat.inc...

CVE-2004-1884

Ipswitch WSFTP Server 4.0.2 has a backdoor XXSESSMGRYY username with a default password, which allows remote attackers to gain access...

PT-2004-2783 · Ipswitch · Ipswitch Ws Ftp Server

Name of the Vulnerable Software and Affected Versions: Ipswitch WS FTP Server version 4.0.2 Description: The issue allows remote attackers to gain access due to a backdoor with the XXSESS MGRYY username that has a default password. Recommendations: For Ipswitch WS FTP Server version 4.0.2, change...

CVE-2004-0311

American Power Conversion APC Web/SNMP Management SmartSlot Card 3.0 through 3.0.3 and 3.21 are shipped with a default password of TENmanUFactOryPOWER, which allows remote attackers to gain unauthorized access...

CVE-2004-0311

CVE-2004-0311 affects APC Web/SNMP Management SmartSlot Card, specifically versions 3.0 through 3.0.3 and 3.21. The issue is a default password vulnerability: the device ships with the password TENmanUFactOryPOWER, allowing remote attackers to gain unauthorized access. Connected documents corrobo...

SMC2804WBR Router Default Password (smcadmin)

The remote host is a SMC2804WBR access point. This host is installed with a default administrator password smcadmin which has not been modified. An attacker may exploit this flaw to gain control over this host using the default password. This script was written by Audun Larsen Changes by Tenable:...

APC SmartSlot Web/SNMP Management Card Default Password

The remote APC Smartslot Web/SNMP Management card ships with a default username and password. An attacker can use this information to access the remote APC device with any username and the factory password 'TENmanUFactOryPOWER'. C Tenable Network Security, Inc. Refs: Subject: APC 9606 SmartSlot...

CVE-2003-1357

ProxyView has a default administrator password of Administrator for Embedded Windows NT, which allows remote attackers to gain access...

CVE-2003-1507

Planet Technology WGSD-1020 and WSW-2401 Ethernet switches use a default "superuser" account with the "planet" password, which allows remote attackers to gain administrative access...

NetGear WAB102

The NetGear WAB102 running firmware v1.2.3 is a dual band wireless access point. After a recent power outage I noticed that the unit reset its password to the default of '1234'. Obviously this makes it possible for someone to reconfigured it meet their needs... a significant security risk. After...

Yak! unauthorized access

FTP server is launched with default password...

ShoutCast server 1.9.2/win32

Informations : °°°°°°°°°°°° Language : Microsoft Visual C++ v5.0/v6.0 MFC Bugged Version : ShoutCast server 1.9.2/win32 and less ? Patched version : none Website : http://www.shoutcast.com Problems : DoS if we know the password from the server Objects : °°°°°°° - scserv.exe vulnerable variable:...

Compaq Web-enabled Management Software Default Account

The Compaq Web-based Management / HP System Management Agent active on the remote host is configured with the default, or a predictable, administrator password. Depending on the agents integrated, this allows an attacker to view sensitive and verbose system information, and may even allow more...

Default Password (ibmdb2) for 'db2inst1' Account

The account 'db2inst1' has the password 'ibmdb2'. An attacker may use this to gain further privileges on this system. %NASLMINLEVEL 70300 This script was written by Chris Foster See the Nessus Scripts License for details Changes by Tenable Add globalsettings/suppliedloginsonly scriptexcludekey...

Default Password (db2fenc1) for 'db2fenc1' Account

The account 'db2fenc1' has the password 'db2fenc1'. An attacker may use this to gain further privileges on the system. %NASLMINLEVEL 70300 This script was written by Chris Foster See the Nessus Scripts License for details Changes by Tenable Add globalsettings/suppliedloginsonly scriptexcludekey...

Default Password (db2as) for 'db2as' Account

The account 'db2as' has the password 'db2as'. An attacker may use it to gain further privileges on the system. %NASLMINLEVEL 70300 This script was written by Chris Foster See the Nessus Scripts License for details Changes by Tenable Add globalsettings/suppliedloginsonly scriptexcludekey 06/2015 A...