EUVD-2013-5508

Malware in sbrugna...

Thecus NAS Server N8800 get_userid OS命令注入漏洞

CVECAN ID: CVE-2013-5667 Thecus NAS server N8800是一款网络接入服务器设备。 Thecus NAS server N8800（固件版本5.03.01）在实现上存在安全漏洞，远程攻击者通过用户名参数内包含元字符的getuserid操作，利用此漏洞可执行任意命令。 0 thecus NAS Server N8800 5.03.01 厂商补丁： thecus ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.thecus.com/...

Thecus NAS Server N8800 ADS/NT Support凭证泄露漏洞

CVECAN ID: CVE-2013-5668 Thecus NAS server N8800是一款网络接入服务器设备。 Thecus NAS server N8800（固件版本5.03.01）的ADS/NT Support页面上在实现上存在安全漏洞，远程攻击者通过读取该页的纯文本内容，利用此漏洞可获取管理员凭证。 0 thecus NAS Server N8800 5.03.01 厂商补丁： thecus ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.thecus.com/...

CVE-2013-5667

The Thecus NAS server N8800 with firmware 5.03.01 allows remote attackers to execute arbitrary commands via a getuserid action with shell metacharacters in the username parameter...

Code injection

The ADS/NT Support page on the Thecus NAS server N8800 with firmware 5.03.01 allows remote attackers to discover the administrator credentials by reading this page's cleartext content...

PT-2014-2944

Name of the Vulnerable Software and Affected Versions Thecus NAS server N8800 version 5.03.01 Description The issue concerns the use of cleartext credentials for administrative authentication. This allows remote attackers to obtain sensitive information by sniffing the network. Recommendations Fo...

PT-2014-2942

Name of the Vulnerable Software and Affected Versions Thecus NAS server N8800 version 5.03.01 Description The issue allows remote attackers to execute arbitrary commands. This is achieved through a get userid action that contains shell metacharacters in the username parameter. Recommendations For...

CVE-2013-5668: Undefined Security Weakness

The ADS/NT Support page on the Thecus NAS server N8800 with firmware 5.03.01 allows remote attackers to discover the administrator credentials by reading this page's cleartext content...

CVE-2013-5669: Undefined Security Weakness

The Thecus NAS server N8800 with firmware 5.03.01 uses cleartext credentials for administrative authentication, which allows remote attackers to obtain sensitive information by sniffing the network...

PT-2014-2943

Name of the Vulnerable Software and Affected Versions Thecus NAS server N8800 version 5.03.01 Description The issue allows remote attackers to discover the administrator credentials by reading the cleartext content of the ADS/NT Support page. Recommendations For version 5.03.01, consider...

CVE-2013-5667: Improper Neutralization of Special Elements used in an OS Command

The Thecus NAS server N8800 with firmware 5.03.01 allows remote attackers to execute arbitrary commands via a getuserid action with shell metacharacters in the username parameter...