7577 matches found
CVE-2002-1558
Cisco ONS15454 and ONS15327 running ONS before 3.4 have an account for the VxWorks Operating System in the TCC, TCC+ and XTC that cannot be changed or disabled, which allows remote attackers to gain privileges by connecting to the account via Telnet...
Multi-Tech ProxyServers ship with null password for administrative access
Overview Some versions of the Multi-Tech ProxyServer products ship without a default password for the administrative interface. Description Some versions of the Multi-Tech ProxyServer products ships without a default password for the administrative interface permitting unauthenticated access via...
CVE-2002-1558
Cisco ONS15454 and ONS15327 running ONS before 3.4 have an account for the VxWorks Operating System in the TCC, TCC+ and XTC that cannot be changed or disabled, which allows remote attackers to gain privileges by connecting to the account via Telnet...
CVE-2002-1558
Cisco ONS15454 and ONS15327 running ONS before 3.4 expose a non-modifiable VxWorks system account within the TCC, TCC+ and XTC, enabling remote privilege escalation by Telnet. Affected product families: Cisco ONS. Root cause: account cannot be changed or disabled, allowing non-authenticated or lo...
CVE-2002-1558: Undefined Security Weakness
Cisco ONS15454 and ONS15327 running ONS before 3.4 have an account for the VxWorks Operating System in the TCC, TCC+ and XTC that cannot be changed or disabled, which allows remote attackers to gain privileges by connecting to the account via Telnet...
Nortel Baystack Default Password
The remote switch has a weak password. This means that anyone who has downloaded a user manual can telnet to it and gain administrative access. This script was written by Douglas Minderhout This script is based uppon a script by Rui Bernardino See the Nessus Scripts License for details Changes by...
MS02-004: Microsoft Telnet Server Protocol Option Handling Remote Overflow (307298) (intrusive check)
The remote telnet server appears to be Microsoft's telnet server. It is possible to crash the remote service when it receives too many options, probably because of a buffer overflow. An attacker may use this flaw to deny service to legitimate users, or execute arbitrary code on the remote host...
Motorola Vanguard with No Password (telnet check)
This device is a Motorola Vanguard router and has no password set. An attacker can reconfigure this device without providing any authentication. This script was written by Geoff Humes See the Nessus Scripts License for details Changes by Tenable: - Revised plugin title 9/2/09 - Revised plugin tit...
Nortel/Bay Networks/Xylogics Annex Default Password
The remote terminal server has the default password set. This means that anyone who has downloaded a user manual can telnet to it and gain administrative access. If modems are attached to this terminal server, it may allow unauthenticated, remote access to the network. This script was written by...
CVE-2002-0629
The Telnet service for Polycom ViewStation before 7.2.4 allows remote attackers to cause a denial of service crash via multiple connections to the server...
CVE-2002-0628
The Telnet service for Polycom ViewStation before 7.2.4 does not restrict the number of failed login attempts, which makes it easier for remote attackers to guess usernames and passwords via a brute force attack...
CVE-2002-0630
The Telnet service for Polycom ViewStation before 7.2.4 allows remote attackers to cause a denial of service crash via long or malformed ICMP packets...
CVE-2002-0629
Technical details about CVE-2002-0629 are not publicly available in the provided documents. Monitor for updates.
CVE-2002-0628
The Telnet service for Polycom ViewStation before 7.2.4 does not restrict the number of failed login attempts, which makes it easier for remote attackers to guess usernames and passwords via a brute force attack...
CVE-2002-0629
The Telnet service for Polycom ViewStation before 7.2.4 allows remote attackers to cause a denial of service crash via multiple connections to the server...
CVE-2002-0628
The issue affects Polycom ViewStation Telnet service prior to version 7.2.4. The Telnet implementation does not restrict failed login attempts, enabling brute‑force guesses of usernames and passwords. Impact is described as remote authentication bypass via brute force. A fix is available: upgrade...
PT-2003-1135 · Polycom · Polycom Viewstation
Name of the Vulnerable Software and Affected Versions: Polycom ViewStation versions prior to 7.2.4 Description: The issue allows remote attackers to guess usernames and passwords via a brute force attack because the Telnet service does not restrict the number of failed login attempts...
CVE-2002-0629: Undefined Security Weakness
The Telnet service for Polycom ViewStation before 7.2.4 allows remote attackers to cause a denial of service crash via multiple connections to the server...
CVE-2002-0628: Improper Restriction of Excessive Authentication Attempts
The Telnet service for Polycom ViewStation before 7.2.4 does not restrict the number of failed login attempts, which makes it easier for remote attackers to guess usernames and passwords via a brute force attack...