PT-2026-107783

An authorization logic vulnerability exists in the Brocade Fabric OS versions before 10.0.1 REST API gateway. The internal gate guarding restricted management endpoints relies exclusively on client-controlled HTTP headers. An authenticated user with any valid REST session can spoof these headers ...

Finger Backdoor Detection

The remote finger daemon seems to be a backdoor, as it seems to react to the request : cmdrootsh@target If a root shell has been installed as /tmp/.sh, then this finger daemon is definitely a trojan, and this system has been compromised. C Tenable Network Security, Inc. include"compat.inc"; if...