Hardcoded credentials

The firmware on GateHouse; Harris BGAN RF-7800B-VU204 and BGAN RF-7800B-DU204; Hughes Network Systems 9201, 9450, and 9502; Inmarsat; Japan Radio JUE-250 and JUE-500; and Thuraya IP satellite terminals has hardcoded credentials, which makes it easier for attackers to obtain unspecified login acce...

Design/Logic Flaw

The firmware on GateHouse; Harris BGAN RF-7800B-VU204 and BGAN RF-7800B-DU204; Hughes Network Systems 9201, 9450, and 9502; Inmarsat; Japan Radio JUE-250 and JUE-500; and Thuraya IP satellite terminals does not require authentication for sessions on TCP port 1827, which allows remote attackers to...

CVE-2013-6034

CVE-2013-6034 involves firmware in multiple satellite terminals (Harris BGAN RF-7800B-VU204/DU204; Hughes NOC 9201/9450/9502; Thuraya IP; Inmarsat; Japan Radio JUE-250/JUE-500) with hardcoded login credentials (CWE-798) and an insecure proprietary protocol exposed on TCP port 1827. The CERT/CC no...

CVE-2013-6035

CVE-2013-6035 affects satellite terminals from Harris (BGAN RF-7800B-VU204, RF-7800B-DU204), Hughes (9201, 9450, 9502), Thuraya IP, Inmarsat, and Japan Radio JUE-250/JUE-500. The issue: firmware allows unauthenticated sessions on TCP port 1827 through an insecure proprietary protocol, enabling an...

CVE-2013-6035

The firmware on GateHouse; Harris BGAN RF-7800B-VU204 and BGAN RF-7800B-DU204; Hughes Network Systems 9201, 9450, and 9502; Inmarsat; Japan Radio JUE-250 and JUE-500; and Thuraya IP satellite terminals does not require authentication for sessions on TCP port 1827, which allows remote attackers to...

CVE-2013-6034

The firmware on GateHouse; Harris BGAN RF-7800B-VU204 and BGAN RF-7800B-DU204; Hughes Network Systems 9201, 9450, and 9502; Inmarsat; Japan Radio JUE-250 and JUE-500; and Thuraya IP satellite terminals has hardcoded credentials, which makes it easier for attackers to obtain unspecified login acce...

Small satellite terminals (VSAT) are vulnerable to Cyber attack

+are+vulnerable+to+Cyber+attack.gif The Military Units that rely on very small aperture terminals VSATs for satellite communications in remote areas are vulnerable to cyber attack. Researchers from cyber intelligence company IntelCrawler recently identified nearly 3 million VSATs, many of them in...

sudo: bypass of tty_tickets constraints

sudo before 1.7.10p5 and 1.8.x before 1.8.6p6, when the ttytickets option is enabled, does not properly validate the controlling terminal device, which allows local users with sudo permissions to hijack the authorization of another terminal via vectors related to a session without a controlling...

IT-Grundschutz M4.017: Sperren und Löschen nicht benötigter Accounts und Terminals

IT-Grundschutz M4.017: Sperren und Löschen nicht benötigter Accounts und Terminals. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.94184 Stand: 13. Ergänzungslieferung...

IT-Grundschutz M4.016: Zugangsbeschränkungen für Benutzer-Kennungen und oder Terminals

IT-Grundschutz M4.016: Zugangsbeschränkungen für Benutzer-Kennungen und oder Terminals. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.94183 Stand: 13...

IT-Grundschutz M4.016: Zugangsbeschränkungen für Benutzer-Kennungen und oder Terminals

IT-Grundschutz M4.016: Zugangsbeschränkungen für Benutzer-Kennungen und oder Terminals. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.94183 Stand: 13...

IT-Grundschutz M4.017: Sperren und Löschen nicht benötigter Accounts und Terminals

IT-Grundschutz M4.017: Sperren und Löschen nicht benötigter Accounts und Terminals. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.94184 Stand: 13. Ergänzungslieferung...

DEBIAN-CVE-2013-2207

ptchown in GNU C Library aka glibc or libc6 before 2.18 does not properly check permissions for tty files, which allows local users to change the permission on the files and obtain access to arbitrary pseudo-terminals by leveraging a FUSE file system...

CVE-2013-2207

ptchown in GNU C Library aka glibc or libc6 before 2.18 does not properly check permissions for tty files, which allows local users to change the permission on the files and obtain access to arbitrary pseudo-terminals by leveraging a FUSE file system...

UBUNTU-CVE-2013-2207

ptchown in GNU C Library aka glibc or libc6 before 2.18 does not properly check permissions for tty files, which allows local users to change the permission on the files and obtain access to arbitrary pseudo-terminals by leveraging a FUSE file system...

[SECURITY] Fedora 17 Update: knetwalk-4.10.5-1.fc17

KNetWalk is a single player logic game. The object of the game is to start the LAN, connecting all the terminals to the server, in as few turns as possible...

[SECURITY] Fedora 18 Update: knetwalk-4.10.5-1.fc18

KNetWalk is a single player logic game. The object of the game is to start the LAN, connecting all the terminals to the server, in as few turns as possible...

[SECURITY] Fedora 17 Update: knetwalk-4.10.4-1.fc17

KNetWalk is a single player logic game. The object of the game is to start the LAN, connecting all the terminals to the server, in as few turns as possible...

[SECURITY] Fedora 18 Update: knetwalk-4.10.4-1.fc18

KNetWalk is a single player logic game. The object of the game is to start the LAN, connecting all the terminals to the server, in as few turns as possible...

[SECURITY] Fedora 19 Update: knetwalk-4.10.4-1.fc19

KNetWalk is a single player logic game. The object of the game is to start the LAN, connecting all the terminals to the server, in as few turns as possible...