CVE-2001-0749: Undefined Security Weakness

Beck IPC GmbH IPC@CHIP Embedded-Webserver allows remote attackers to read arbitrary files via a webserver root directory set to system root...

CVE-2001-1340

Beck GmbH IPC@Chip TelnetD service supports only one connection and does not disconnect a user who does not complete the login process, which allows remote attackers to lock out the administrator account by connecting to the service...

CVE-2001-1340

Beck GmbH IPC@Chip TelnetD service is affected. The TelnetD accepts only a single connection and does not disconnect a user who does not complete login, enabling an attacker to lock out the administrator by remaining idle at a login prompt. This vulnerability stems from a missing login timeout an...

CVE-2001-1339

Beck IPC GmbH IPC@CHIP telnet service does not delay or disconnect after bad passwords, enabling brute‑force password guessing from the network. The affected component is the IPC@CHIP telnet service; no delay on failed logins is the root cause. Impact is described with high/critical severities in...

CVE-2001-1337

The CVE-2001-1337 entry concerns Beck IPC GmbH IPC@CHIP Embedded-Webserver. Reported impact is a remote denial of service triggered by a long HTTP request. The available information does not specify affected versions, exact vulnerable component or root cause details, nor any published exploitable...

CVE-2001-1338

Beck IPC GmbH IPC@CHIP TelnetD server generates different responses when given valid and invalid login names, which allows remote attackers to determine accounts on the system...

CVE-2001-1338

CVE-2001-1338 affects Beck IPC GmbH IPC@CHIP TelnetD server. The service responds differently for valid vs. invalid login names, enabling remote attackers to enumerate accounts. The TelnetD daemon allows unlimited login attempts, facilitating brute-force credential guessing and potential unauthor...

CVE-2001-1337

Beck IPC GmbH IPC@CHIP Embedded-Webserver allows remote attackers to cause a denial of service via a long HTTP request...

CVE-2001-1340

Beck GmbH IPC@Chip TelnetD service supports only one connection and does not disconnect a user who does not complete the login process, which allows remote attackers to lock out the administrator account by connecting to the service...

CVE-2001-1341

CVE-2001-1341 concerns Beck GmbH IPC@Chip embedded web server, where the default installation includes the chipcfg.cgi CGI. A crafted request to chipcfg.cgi can cause the server to disclose sensitive network configuration data, enabling remote attackers to obtain confidential information. The iss...

CVE-2001-1340: Undefined Security Weakness

Beck GmbH IPC@Chip TelnetD service supports only one connection and does not disconnect a user who does not complete the login process, which allows remote attackers to lock out the administrator account by connecting to the service...

CVE-2001-1341: Undefined Security Weakness

The Beck GmbH IPC@Chip embedded web server installs the chipcfg.cgi program by default, which allows remote attackers to obtain sensitive network information via a request to the program...

CVE-2001-1339: Improper Restriction of Excessive Authentication Attempts

Beck IPC GmbH IPC@CHIP telnet service does not delay or disconnect users from the service when bad passwords are entered, which makes it easier for remote attackers to conduct brute force password guessing attacks...

CVE-2001-1337: Undefined Security Weakness

Beck IPC GmbH IPC@CHIP Embedded-Webserver allows remote attackers to cause a denial of service via a long HTTP request...

CVE-2001-1338: Undefined Security Weakness

Beck IPC GmbH IPC@CHIP TelnetD server generates different responses when given valid and invalid login names, which allows remote attackers to determine accounts on the system...

Beck GmbH IPC@Chip TelnetD vulnerable to brute-force password attack

Overview There is a vulnerability in the Beck IPC@CHIP that may allow an attacker to gain access to the device. Description The Beck IPC@CHIP is a single chip embedded webserver. This device contains a telnet server that "leaks information". That is, when an attacker connects to the telnet daemon...

Beck GmbH IPC@Chip FtpD allows an attacker to gain access to the device

Overview There is a vulnerability in the Beck IPC@CHIP that allows an attacker to gain access to the device. Description The Beck IPC@CHIP is a single chip embedded webserver. This device also contains an ftp server that is configured by default to allow anonymous access. Additionally, the device...

Beck IPC@Chip TelnetD vulnerable to account lockout via idle telnet connection

Overview There is a vulnerability in the Beck IPC@CHIP that allows an attacker to create a denial-of-service condition. Description The Beck IPC@CHIP is a single chip embedded webserver. This device contains a telnet server that is configured by default to not have a login timeout. Additionally,...

CVE-1999-1086

Novell 5 and earlier, when running over IPX with a packet signature level less than 3, allows remote attackers to gain administrator privileges by spoofing the MAC address in IPC fragmented packets that make NetWare Core Protocol NCP calls...

CVE-1999-1086: Undefined Security Weakness

Novell 5 and earlier, when running over IPX with a packet signature level less than 3, allows remote attackers to gain administrator privileges by spoofing the MAC address in IPC fragmented packets that make NetWare Core Protocol NCP calls...