PT-2009-4796 · Iomega · Iomega Storcenter Pro

Name of the Vulnerable Software and Affected Versions: Iomega StorCenter Pro affected versions not specified Description: The issue allows remote attackers to hijack active sessions and gain privileges via brute force guessing attacks on the session id parameter in the "cgi-bin/makecgi-pro"...

Iomega StorCenter Pro NAS Web Authentication Bypass

The Iomega StorCenter Pro Network Attached Storage device web interface increments sessions IDs, allowing for simple brute force attacks to bypass authentication and gain administrative access. This module requires Metasploit: https://metasploit.com/download Current source:...

CVE-2002-1863

Iomega Network Attached Storage (NAS) A300U (and possibly other models) has a vulnerability where the FTP service cannot be disabled, enabling local users to access home directories via FTP even when access to all shared directories is disabled. Affected component: FTP enablement/disable control ...

CVE-2002-1955

Iomega NAS A300U uses cleartext LANMAN authentication when mounting CIFS/SMB drives, which allows remote attackers to perform a man-in-the-middle attack...

CVE-2002-1949

CVE-2002-1949 affects Iomega NAS A300U Admin Web Page, where credentials are transmitted in cleartext over the network, enabling remote password sniffing. Connected docs corroborate the issue and provide limited remediation guidance: IBM bulletin notes remediations for Jazz Foundation products (u...

CVE-2002-1955

Technical details (affected products, versions, root cause, or fixes) are not publicly provided in the supplied documents. Monitor for updates.

CVE-2002-1949

The Network Attached Storage NAS Administration Web Page for Iomega NAS A300U transmits passwords in cleartext, which allows remote attackers to sniff the administrative password...

CVE-2002-1863

Iomega Network Attached Storage NAS A300U, and possibly other models, does not allow the FTP service to be disabled, which allows local users to access home directories via FTP even when access to all shared directories have been disabled...

CVE-2002-1863

Iomega Network Attached Storage NAS A300U, and possibly other models, does not allow the FTP service to be disabled, which allows local users to access home directories via FTP even when access to all shared directories have been disabled...

CVE-2002-1955

Iomega NAS A300U uses cleartext LANMAN authentication when mounting CIFS/SMB drives, which allows remote attackers to perform a man-in-the-middle attack...

CVE-2002-1949

The Network Attached Storage NAS Administration Web Page for Iomega NAS A300U transmits passwords in cleartext, which allows remote attackers to sniff the administrative password...

PT-2002-2670 · Iomega · Iomega Nas A300U

Name of the Vulnerable Software and Affected Versions: Iomega NAS A300U Description: The issue concerns the transmission of passwords in cleartext by the Network Attached Storage NAS Administration Web Page, allowing remote attackers to intercept the administrative password. Recommendations: For...

CVE-1999-1174

ZIP drive for Iomega ZIP-100 disks allows attackers with physical access to the drive to bypass password protection by inserting a known disk with a known password, waiting for the ZIP drive to power down, manually replacing the known disk with the target disk, and using the known password to...

CVE-1999-1174

ZIP drive for Iomega ZIP-100 disks allows attackers with physical access to the drive to bypass password protection by inserting a known disk with a known password, waiting for the ZIP drive to power down, manually replacing the known disk with the target disk, and using the known password to...

CVE-1999-1174

The CVE-1999-1174 entry describes a physical-access vulnerability in Iomega ZIP-100 drives: an attacker can bypass password protection by inserting a disk with a known password, allowing the drive to power down, swapping to the target disk, and then using the known password to access it. The root...

Vulnerability in jaZip.

Dear, Bugtraq. jaZip is a program for managing an Iomega Zip or Jaz drive. It is often installed setuid root - and because of a buffer overflow it is possible for regular users to become root. Please excuse me if this was know. Please note that I can not guarantee that this information is correct...

Linux news 1.07.00

Linux Kernel pre-patch 2.4.0 test3-pre2 Вышла очередная предварительная, вторая по счету, версия третьего тестового ядра Linux - Linux Kernel pre-patch 2.4.0 test3-pre2. Подробнее: http://www.icewalk.com/softlib/app/app00797.html GPL будут тестировать юристы По мнению Д. Е. Поуэла Dennis E. Powel...

iomega-onestep-backup.txt

Date: Thu, 14 Jan 1999 09:39:05 -0800 From: aberrant To: [email protected] Subject: Shoddy encryption in Iomega One-Step Backup fwd I searched the archives and didn't find anything regarding this. The vendor was notified over a week ago and, aside from the standard "Thank you for your concern"...