10121 matches found
iomega Home Media Network Hard Drive unauthorized access
Web interface allows SMB access to device and network it's connected to...
Unauthenticated Filesystem Access in iomega Home Media Network Hard Drive
----------------------------- Advisory ----------------------------- Unauthenticated File-system Access in iomega Home Media Network Hard Drive ----------------------------- Affected products ----------------------------- iomega Home Media Network Hard Drive Firmware versions 2.038 - 2.061...
Iomega Home Media Network Hard Drive v.2.038-2.061 File-system Access
Exploit for hardware platform in category remote exploits =========================================================================================== Unauthenticated File-system Access in Iomega Home Media Network Hard Drive v. 2.038 - 2.061...
CVE-2009-4648
CVE-2009-4648 affects Accellion Secure File Transfer Appliance before 8_0_105. Root cause: access to sensitive commands run with extra sudo privileges is not properly restricted in /usr/local/bin/admin.pl, enabling local administrators to escalate privileges. Vulnerability vectors include (1) arb...
TEKUVA Authentication Bypass
!/usr/bin/perl Exploit: TEKUVA Password Reminder Authentication Bypass Date: 11/19/2009 Author: iqlusion [email protected] Software Link: http://download.cnet.com/Password-Reminder/3000-20644-10966598.html Version: 1.0.0.1 Info: TEKUVA Password Reminder is a password vault that allows you to...
Xxasp Network Hard Disk v3. 3. 2 Sql injection 0day-vulnerability warning-the black bar safety net
Xxasp Network Hard Disk v3. 3. 2 Sql injection 0day As for this system I do not introduced,the vulnerability relates to the file MyFiles. asp ShareList. asp, I to ShareList. asp is an example of a simple analysis the next,The code is as follows: Dim...
HealthNet Data Breach Affects 1.5 Mil Customers
Health Net Inc. announced Wednesday that it is investigating a healthcare data security breach that resulted in the loss of patient data, affecting 1.5 million customers. The healthcare provider said the lost files, a mixture of medical data, Social Security numbers and other personally...
Security Risk: The Device Formerly Known as Your Hard Drive
Guest editorial by Paul Roberts In a weird kind of synchronicity, two stories recently have raised the specter of discarded not merely misplaced hard drives as the source of considerable consternation and legal wrangling. In the most serious incident, the Inspector General of the National Archive...
CVE-2009-3710
RioRey RIOS 4.6.6 and 4.7.0 uses an undocumented, hard-coded username dbadmin and password sq!us3r for an SSH tunnel, which allows remote attackers to gain privileges via port 8022...
CVE-2009-3710
RioRey RIOS 4.6.6 and 4.7.0 uses an undocumented, hard-coded username dbadmin and password sq!us3r for an SSH tunnel, which allows remote attackers to gain privileges via port 8022...
CVE-2009-3710
RioRey RIOS 4.6.6 and 4.7.0 use an undocumented, hard-coded username (dbadmin) and password (sq!us3r) for an SSH tunnel, enabling remote attackers to gain privileges via port 8022. The OpenVAS entry corroborates default credentials exposure; no patch/versioned remediation details are provided in ...
Riorey RIOS 4.7.0 - Hard-Coded Password
Riorey RIOS 4.7.0 - Hard-Coded Password Severity: High Full root access to the device Date: 07 October 2009 Versions Affected: RIOS 4.6.6 , 4.7.0 possibly others Discovered on: 25 July 2009 Vendor URL: www.riorey.com Author: Marek Kroemeke Overview: Riorey DDoS mitigation appliences www.riorey.co...
Cross-site Scripting (XSS)
Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS. A certain Red Hat modification to the ChrootDirectory feature in OpenSSH 4.8, as used in sshd in OpenSSH 4.3 in Red Hat Enterprise Linux RHEL 5.4 and Fedora 11, allows local users to gain privileges via hard...
Design/Logic Flaw
A certain Red Hat modification to the ChrootDirectory feature in OpenSSH 4.8, as used in sshd in OpenSSH 4.3 in Red Hat Enterprise Linux RHEL 5.4 and Fedora 11, allows local users to gain privileges via hard links to setuid programs that use configuration files within the chroot directory, relate...
CVE-2009-2904
A certain Red Hat modification to the ChrootDirectory feature in OpenSSH 4.8, as used in sshd in OpenSSH 4.3 in Red Hat Enterprise Linux RHEL 5.4 and Fedora 11, allows local users to gain privileges via hard links to setuid programs that use configuration files within the chroot directory, relate...
CVE-2009-2904
CVE-2009-2904 is a local privilege-escalation flaw in OpenSSH related to a Red Hat modification of the ChrootDirectory feature. The issue affects OpenSSH 4.8 used by sshd in OpenSSH 4.3 on Red Hat Enterprise Linux (RHEL) 5.4 and Fedora 11, allowing a local user to gain privileges via hard links t...
openssh: possible privilege escalation when using ChrootDirectory setting
A certain Red Hat modification to the ChrootDirectory feature in OpenSSH 4.8, as used in sshd in OpenSSH 4.3 in Red Hat Enterprise Linux RHEL 5.4 and Fedora 11, allows local users to gain privileges via hard links to setuid programs that use configuration files within the chroot directory, relate...
CVE-2009-3200
The QNAP TS-239 Pro and TS-639 Pro with firmware 2.1.7 0613, 3.1.0 0627, and 3.1.1 0815 create an undocumented recovery key and store it in the ENCK variable in flash memory, which allows local users to bypass the passphrase requirement and decrypt the hard drive by reading this variable,...
CVE-2009-3200
The QNAP TS-239 Pro and TS-639 Pro with firmware 2.1.7 0613, 3.1.0 0627, and 3.1.1 0815 create an undocumented recovery key and store it in the ENCK variable in flash memory, which allows local users to bypass the passphrase requirement and decrypt the hard drive by reading this variable,...
CVE-2009-3200
The CVE-2009-3200 entry describes a vulnerability in QNAP TS-239 Pro and TS-639 Pro devices running firmware 2.1.7 0613, 3.1.0 0627, and 3.1.1 0815. An undocumented recovery key is created and stored in the ENCK variable in flash memory, allowing local users to bypass the passphrase and decrypt t...