EUVD-2009-0643

Malware in sbrugna...

CVE-2009-0640

Directory traversal vulnerability in the administrative web server in Swann DVR4-SecuraNet allows remote attackers to read arbitrary files via a .. dot dot in the URI, as demonstrated by reading the vynetman.cfg file that contains passwords...

Directory traversal

Directory traversal vulnerability in the administrative web server in Swann DVR4-SecuraNet allows remote attackers to read arbitrary files via a .. dot dot in the URI, as demonstrated by reading the vynetman.cfg file that contains passwords...

CVE-2009-0644

The HTTP interface in Swann DVR4-SecuraNet has a certain default administrative username and password, which makes it easier for remote attackers to obtain privileged access...

Default credentials

The HTTP interface in Swann DVR4-SecuraNet has a certain default administrative username and password, which makes it easier for remote attackers to obtain privileged access...

CVE-2009-0644

CVE-2009-0644 concerns the HTTP interface of the Swann DVR4-SecuraNet platform, where a default administrative username/password exists. The available documents indicate this flaw can allow remote attackers to obtain privileged access. The entries do not specify affected versions, exploit details...

CVE-2009-0644

The HTTP interface in Swann DVR4-SecuraNet has a certain default administrative username and password, which makes it easier for remote attackers to obtain privileged access...

CVE-2009-0640

The CVE-2009-0640 issue affects the Swann DVR4-SecuraNet device’s administrative web server. The vulnerability is a directory traversal in the web interface that allows an attacker to read arbitrary files by manipulating the URI path with .. sequences, demonstrated via reading vy_netman.cfg (whic...

CVE-2009-0640

Directory traversal vulnerability in the administrative web server in Swann DVR4-SecuraNet allows remote attackers to read arbitrary files via a .. dot dot in the URI, as demonstrated by reading the vynetman.cfg file that contains passwords...

Remote Authentication Bypass - Swann DVR4 SecuraNet (possibly DVR9 as well)

Dear BugTraq Readers, It is possible to download the configuration containing usernames/passwords to this CCTV DVR which is being marketed by Swann Security suspect that it is a rebranded AVTech unit tez@tetris $ curl http://192.168.2.100/../../var/run/vynetman.cfg snipPadmin111111 the above are...

Swann DVR4 SecuraNet - Directory Traversal

Swann DVR4 SecuraNet - Directory Traversal source: https://www.securityfocus.com/bid/33716/info Swann DVR4 SecuraNet is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting the issue may allow an attacker to obtain sensitive...