1701 matches found
CVE-2001-1425
The CVE-2001-1425 entry concerns the Alcatel Speed Touch (firmware KHDSAA.108 through KHDSAA.134) where the EXPERT user’s challenge-response authentication can be bypassed by an attacker who directly computes the login response from information provided during login. This constitutes remote privi...
CVE-2001-1426
Affected product: Alcatel Speed Touch with firmware KHDSAA.108 and KHDSAA.132–KHDSAA.134. Vulnerability: TFTP server runs without a password, enabling remote modification of firmware versions or device configurations. Root cause: insecure TFTP service exposed on the device. Impact: allows uninten...
CVE-2001-1425
The challenge-response authentication of the EXPERT user for Alcatel Speed Touch running firmware KHDSAA.108 and KHDSAA.132 through KHDSAA.134 allows remote attackers to gain privileges by directly computing the response based on information that is provided by the device during login...
CVE-2001-1426
Alcatel Speed Touch running firmware KHDSAA.108 and KHDSAA.132 through KHDSAA.134 has a TFTP server running without a password, which allows remote attackers to change firmware versions or the device's configurations...
CVE-2001-1426: Undefined Security Weakness
Alcatel Speed Touch running firmware KHDSAA.108 and KHDSAA.132 through KHDSAA.134 has a TFTP server running without a password, which allows remote attackers to change firmware versions or the device's configurations...
CVE-2001-1424: Undefined Security Weakness
Alcatel Speed Touch ADSL modem running firmware KHDSAA.108, KHDSAA.132, KHDSBA.133, and KHDSAA.134 has a blank default password, which allows remote attackers to gain unauthorized access...
CVE-2001-1425: Undefined Security Weakness
The challenge-response authentication of the EXPERT user for Alcatel Speed Touch running firmware KHDSAA.108 and KHDSAA.132 through KHDSAA.134 allows remote attackers to gain privileges by directly computing the response based on information that is provided by the device during login...
CVE-2004-1781
Info Touch Surfnet kiosk allows local users to crash Surfnet and access the underlying operating system via the CMDCREDITCARDCHARGE command...
CVE-2004-1795
Info Touch Surfnet kiosk allows local users to access the underlying filesystem via a 'file://' URI...
CVE-2003-0171
Summary (CVE-2003-0171) : Mac OS X DirectoryService is vulnerable because it uses system(2) to run touch(1) without a full path, allowing a local attacker to alter PATH and execute a malicious touch as root. This can lead to privilege escalation and DoS. The attack is mediated by terminating Dire...
CVE-2003-0171: Undefined Security Weakness
DirectoryServices in MacOS X trusts the PATH environment variable to locate and execute the touch command, which allows local users to execute arbitrary commands by modifying the PATH to point to a directory containing a malicious touch program...
CVE-2002-0119
Alcatel Speed Touch Home ADSL Modem allows remote attackers to cause a denial of service reboot via a network scan with unusual packets, such as nmap with OS detection...
CVE-2002-0119
The CVE-2002-0119 entry concerns the Alcatel Speed Touch Home ADSL Modem. The vulnerability is triggered by remote network scanning using unusual packets (e.g., Nmap with OS detection), which leads to a denial of service (reboot). The NVD entry lists a network-based attack vector with low complex...
CVE-2002-0119: Undefined Security Weakness
Alcatel Speed Touch Home ADSL Modem allows remote attackers to cause a denial of service reboot via a network scan with unusual packets, such as nmap with OS detection...
ALCATEL Speed Touch PRO port redirect exploit
Taking advantage from the ALCATEL Speed Touch Pro backdoor and configuration problems, it is possible to obtain a "full priv" access to the router and launch several attack against the internal LAN thanks to the NAT/PAT feature often made available. If the router is "telnetable" it means that "ip...
multiple vulnerabilities in Alcatel Speed Touch DSL modems
-----BEGIN PGP SIGNED MESSAGE----- Subject: multiple vulnerabilities in Alcatel ADSL-Ethernet bridge devices I. Summary Researchers associated with the San Diego Supercomputer Center at the University of California, San Diego have identified multiple implementation flaws in the Alcatel Speed Touc...
CVE-2001-1426
Alcatel Speed Touch running firmware KHDSAA.108 and KHDSAA.132 through KHDSAA.134 has a TFTP server running without a password, which allows remote attackers to change firmware versions or the device's configurations...
CVE-2001-1425
The challenge-response authentication of the EXPERT user for Alcatel Speed Touch running firmware KHDSAA.108 and KHDSAA.132 through KHDSAA.134 allows remote attackers to gain privileges by directly computing the response based on information that is provided by the device during login...
