Avaya switches contains multiple undocumented accounts allowing full administrative access to the device

Overview Multiple Avaya switches do not adequately protect privileged access. Description Avaya's P882, P880, P580, and P550R series switches do not adequately protect account access. As a result, a remote attacker can gain access to the switch via http or telnet. --- Impact A remote attacker can...

Undocumented account vulnerability in Avaya P550R/P580/P880/P882 switches

Undocumented account vulnerability in Avaya P550R/P580/P880/P882 switches 1. Problem Description Two undocummented accounts with default passwords allow access via telnet and the web interface to Cajun P550R/P580/P880/P882 switches. Both accounts give developer access to the switch. The...

AVAYA Cajun unauthorized access

Undocumented read/write SNMP community NoGaH$@!. Undocumented accounts diag/danger and manuf/xxyyzz...

Проблемы в SNMP Cisco/Olicom/3Com (ILMI SNMP community)

Неоторые MIB-группы могут быть прочитаны/изменены с исопльзованием недокументированного SNMP-community ILMI и др.. Кроме того, могут "оживать" удаленные community...

CVE-1999-1508

The CVE-1999-1508 issue affects the Tektronix PhaserLink Printer Web Server (840.0 and earlier). The vulnerability arises from undocumented URLs (ncl_items.html and ncl_subjects.html) that, when requested, can allow a remote attacker to gain administrator access to the printer. The connected NASL...

CVE-1999-1508

Web server in Tektronix PhaserLink Printer 840.0 and earlier allows a remote attacker to gain administrator access by directly calling undocumented URLs such as nclitems.html and nclsubjects.html...

CVE-2001-0380

Crosscom/Olicom XLT-F running XL 80 IM Version 5.5 Build Level 2 allows a remote attacker SNMP read and write access via a default, undocumented community string 'ILMI'...

undocumented 3Com Netbuilder II SNMP ILMI commnity

WWW.PLAZASITE.COM Systems & Security Division Title: 3Com Netbuilder II SNMP ILMI Community Date: 15-5-2001 Platform: Only tested Netbuilder II routers Author: Juan Manuel Pascual [email protected] Status: Vendor Contacted but no answers received OVERVIEW: It seems to exist an undocumented...

Olicom XLT-F XL 80 IM V5.5BL2 - Undocumented Community String

source: https://www.securityfocus.com/bid/2802/info Olicom routers were previously manufactured and distributed by Olicom, a company now owned by Intel. Olicom routers provide a low-cost routing solution for small businesses. A problem with Olicom routers could allow unauthorized access to certai...

CVE-1999-0760

Undocumented ColdFusion Markup Language CFML tags and functions in the ColdFusion Administrator allow users to gain additional privileges...

Loading Rootkit using SystemLoadAndCallImage

Greets, For a while there has been a thread on NTBUGTRAQ about kernel-mode protection from rootkits. This is good - the whole point of our rootkit.com project is to get people thinking about the problem. For example, there is now an ANTI-Rootkit called Integrity Protection Driver from Pedestal...

xperl.sh

Ok, I decided to describe it with details. a If you'll try to fool perl, forcing it to execute one file instead of another quite complicated condition, refer to source code, it generates such mail to administrator: From: Bastard Operator To: [email protected] User 500 tried to run dev 769 ino...

sperl 5.00503 (and newer ;) exploit

Not much to say except I feel little bit stupid posting it ... This exploit gives instant root, at least on RedHat 6.x/7.0 Linux boxes I have available for tests... And for sure, all other systems are vulnerable as well - it's just maybe this code will need some refining / tuning / minor changes...

CVE-2000-0384

NetStructure 7110 and 7180 have undocumented accounts servnow, root, and wizard whose passwords are easily guessable from the NetStructure's MAC address, which could allow remote attackers to gain root access...

Серьезная локальная DoS-атака против *BSD

Недокументированный системный вызов, используемый в ipcs, неиспользующий проверку ACL позволяет любому пользователю заблокировать выход приложений...

Cisco Bug

Hello, I found what I think is an undocumented bug of at least the cisco 760 series, I tried to report it to cisco but they are always busy and english is one of my weak points. The bug: When you open about 98 connections to the port 23 of a Cisco 760 router it does a self reboot disconnecting it...

NetStructure 7180 remote backdoor vulnerability

@Stake Inc. L0pht Research Labs www.atstake.com www.L0pht.com Security Advisory Advisory Name: NetStructure 7180 remote backdoor vulnerability Release Date: May 8th, 2000 Application: Intel NetStructure 7180 previously the Ipivot Commerce Accelerator 8000 Severity: Compromise from a remote networ...

Дырка в NetStructure

Имеется недокументированный пароль администрирования для 7110 локальный, для 7180 удаленный составленный из MAC-адреса сетевого адаптера...

NetStructure 7110 console backdoor

@Stake Inc. L0pht Research Labs www.atstake.com www.L0pht.com Security Advisory Advisory Name: NetStructure 7110 console backdoor Release Date: May 8th, 2000 Application: Intel NetStructure 7110 previously the Ipivot Commerce Accelerator 1000 Severity: Box can be compromised through configuration...

CVE-2000-0384

NetStructure 7110 and 7180 have undocumented accounts servnow, root, and wizard whose passwords are easily guessable from the NetStructure's MAC address, which could allow remote attackers to gain root access...