9265 matches found
CVE-2006-5901
Hawking Technology wireless router WR254-CA uses a hardcoded IP address among the set of DNS server IP addresses, which could allow remote attackers to cause a denial of service or hijack the router by attacking or spoofing the server at the hardcoded address. NOTE: it could be argued that this...
CVE-2006-5901: Undefined Security Weakness
Hawking Technology wireless router WR254-CA uses a hardcoded IP address among the set of DNS server IP addresses, which could allow remote attackers to cause a denial of service or hijack the router by attacking or spoofing the server at the hardcoded address. NOTE: it could be argued that this...
Hawking Technology WR254-CA wireless routers hardcoded DNS server address
139.175.55.244 DNS address is hardcoded...
Hawking Technology wireless router WR254-CA DNS issue
Hi, I have discovered a security issue with Hawking Technology wireless router, model WR254-CA. Since they are still available on the market so I think it will be good to warn the community. This router contains a DNS address 139.175.55.244 hardcoded in the firmware. At least when used in DHCP...
[SA22041] Fi Win WiFi Phone SS28S Debug Console Security Issue
---------------------------------------------------------------------- Want to work within IT-Security? Secunia is expanding its team of highly skilled security experts. We will help with relocation and obtaining a work permit. Currently the following type of positions are available:...
FiWin SS28S Wi-Fi phones backdoor account
Phone has debug console with telnet access and hardcoded account 1 with password 1...
CVE-2006-4950
Cisco IOS 12.2 through 12.4 before 20060920, as used by Cisco IAD2430, IAD2431, and IAD2432 Integrated Access Devices, the VG224 Analog Phone Gateway, and the MWR 1900 and 1941 Mobile Wireless Edge Routers, is incorrectly identified as supporting DOCSIS, which allows remote attackers to gain...
barracudaExec.txt
Severity: High - Full system compromise possible Date: 04 August 2006 Discovered by: Matthew Hall [email protected] Credits for original discovery to Greg Sinclair Discovered on: 03 Aug 2006 Summary: Lack of input sanitisation in the Linux based Barracuda spam firewall web interface allows executio...
barracudeHardcode.txt
Title: Barracuda Hardcoded Password Vulnerability Severity: High Sensitive Information Disclosure Date: 01 August 2006 Version Affected: Barracuda Spam Firewall version 3.3.01.001 to 3.3.03.053 Discovered by: Greg Sinclair [email protected] Discovered on: 28 May 2006 Overview: Barracuda Sp...
barracudeArbitrary.txt
Title: Barracuda Arbitrary File Disclosure Severity: High Sensitive Information Disclosure Date: 01 August 2006 Version Affected: Barracuda Spam Firewall version 3.3.01.001 to 3.3.03.053 Discovered by: Greg Sinclair [email protected] Discovered on: 29 May 2006 Overview: Barracuda Spam...
CVE-2006-4082
Barracuda Spam Firewall BSF, possibly 3.3.03.053, contains a hardcoded password for the admin account for logins from 127.0.0.1 localhost, which allows local users to gain privileges...
CVE-2006-4082
Barracuda Spam Firewall BSF, possibly 3.3.03.053, contains a hardcoded password for the admin account for logins from 127.0.0.1 localhost, which allows local users to gain privileges...
CVE-2006-4082
Barracuda Spam Firewall (BSF) is affected by CVE-2006-4082. Concrete details from connected sources indicate default credentials in affected BSF firmware: versions 3.3.01.001 to 3.3.02.053 expose a guest account and a fixed admin password that cannot be modified by an administrator, enabling a re...
CVE-2006-4082: Undefined Security Weakness
Barracuda Spam Firewall BSF, possibly 3.3.03.053, contains a hardcoded password for the admin account for logins from 127.0.0.1 localhost, which allows local users to gain privileges...
Barracuda Spam Firewall multiple security vulnerabilities
Login.pm Web-interface hardcoded guest account password, /cgi-bin/previewemail.cgi directory traversal...
Barracuda Spam Firewall <= 3.3.03.053 Remote Code Execution
Exploit for hardware platform in category remote exploits =========================================================== Barracuda Spam Firewall = 3.3.03.053 Remote Code Execution =========================================================== Title: Barracuda Arbitrary File Disclosure + Command Executi...
[Full-disclosure] Barracuda Spam Firewall: Administrator Level Remote Command Execution [ID-20060804-01]
Severity: High - Full system compromise possible Date: 04 August 2006 Discovered by: Matthew Hall [email protected] Credits for original discovery to Greg Sinclair Discovered on: 03 Aug 2006 Summary: Lack of input sanitisation in the Linux based Barracuda spam firewall web interface allows executio...
Barracuda Vulnerability: Hardcoded Password [NNL-20060801-01]
Title: Barracuda Hardcoded Password Vulnerability Severity: High Sensitive Information Disclosure Date: 01 August 2006 Version Affected: Barracuda Spam Firewall version 3.3.01.001 to 3.3.03.053 Discovered by: Greg Sinclair [email protected] Discovered on: 28 May 2006 Overview: Barracuda Sp...
Improper Validation of User-mode Pointers
Improper Validation of User-mode Pointers Many of the hooks that KAV installs and even the custom system services suffer from flaws that are detrimental to the operation of the system. For instance, KAV's modified NtOpenProcess attempts to determine if a user address is valid by comparing it to t...
