2501 matches found
CYBSEC - Security Pre-Advisory: SAP Internet Graphics Service (IGS) Undocumented Features
The following pre-advisory is also available in PDF format for download at: http://www.cybsec.com/vuln/CYBSEC-SecurityPre-AdvisorySAPIGSUndocumentedFeatures.pdf CYBSEC S.A. www.cybsec.com Pre-Advisory Name: SAP Internet Graphics Service IGS Undocumented Features ================== Vulnerability...
[Full-disclosure] (0-Day) PolyCom IP-301 VoIP Desktop Phone HTTP server DoS and undocumented TCP port 42
Title: PolyCom IP-301 VoIP Desktop Phone HTTP server DoS and undocumented TCP port 42 Version: 1.4.1.0040 Issues: 1.Phone reboots from the Nessus httpfingerprintinghmap.nasl script. 2.Phone reboots from a long URL sent to the HTTP daemon 3.Undocumented open port TCP/42 returns “Halt! Who goes...
CVE-2006-3285
The internal database in Cisco Wireless Control System WCS for Linux and Windows before 3.251 uses an undocumented, hard-coded username and password, which allows remote authenticated users to read, and possibly modify, sensitive configuration data aka bugs CSCsd15955...
CVE-2006-3285: Undefined Security Weakness
The internal database in Cisco Wireless Control System WCS for Linux and Windows before 3.251 uses an undocumented, hard-coded username and password, which allows remote authenticated users to read, and possibly modify, sensitive configuration data aka bugs CSCsd15955...
Mac OS X 10.4.x < 10.4.5 Kernel Undocumented System Call Local DoS
The remote host is running a version of Mac OS X 10.4.x that is prior to 10.4.5. Mac OS X 10.4.5 contains a security fix for a local denial of service vulnerability. A malicious local user may trigger the vulnerability by invoking an undocumented system call. C Tenable Network Security, Inc. if !...
Information disclosure
Apple Mac OS X 10.4.5 and allows local users to cause a denial of service crash via an undocumented system call...
CVE-2006-0382
Apple Mac OS X 10.4.5 and allows local users to cause a denial of service crash via an undocumented system call...
CVE-2006-0382: Undefined Security Weakness
Apple Mac OS X 10.4.5 and allows local users to cause a denial of service crash via an undocumented system call...
CVE-2006-0641
Orbicule Undercover uses a third-party web server to determine the IP address through which the computer is accessing the Internet, but does not document this third-party disclosure, which leads to a potential privacy leak that might allow transmission of sensitive information to an unintended...
Authentication flaw
MPM SIP HP-180W Wireless IP Phone WE.00.17 allows remote attackers to obtain sensitive information and possibly cause a denial of service via a direct connection to UDP port 9090, which is undocumented and does not require authentication...
Authentication flaw
Advantage Century Telecommunication ACT P202S IP Phone 1.01.21 running firmware 1.1.21 has multiple undocumented ports available, which 1 might allow remote attackers to obtain sensitive information, such as memory contents and internal operating-system data, by directly accessing the VxWorks WDB...
CVE-2006-0374
Advantage Century Telecommunication ACT P202S IP Phone 1.01.21 running firmware 1.1.21 has multiple undocumented ports available, which 1 might allow remote attackers to obtain sensitive information, such as memory contents and internal operating-system data, by directly accessing the VxWorks WDB...
[Full-disclosure] Clipcomm CPW-100E VoIP wireless handset phone open debug service TCP/60023
I disclosed the following issue at ShmooCon 2006 http://www.shmoocon.org/ during my "VoIP Wireless Phone Security Analysis" presentation. Thanks, --scm =============================================================== DATE: 16 January, 2006 VENDOR: Clipcomm VENDOR NOTIFIED: 14 December, 2005 PRODUC...
[Full-disclosure] ZyXel P2000W (Version 2) VoIP wireless phone undocumented port UDP/9090
I disclosed the following issue at ShmooCon 2006 http://www.shmoocon.org/ during my "VoIP Wireless Phone Security Analysis" presentation. Thanks, --scm =============================================================== DATE: 16 January, 2006 VENDOR NOTIFIED: 7 December, 2005 VENDOR: Zyxel PRODUCT:...
[Full-disclosure] ACT P202S VoIP wireless phone multiple undocumented ports/services
I disclosed the following issues at ShmooCon 2006 http://www.shmoocon.org/ during my "VoIP Wireless Phone Security Analysis" presentation. Thanks, --scm =============================================================== DATE: 16 January, 2006 VENDOR: ACT – Advantage Century Telecommunication...
Default credentials
Cisco Security Monitoring, Analysis and Response System CS-MARS before 4.1.3 has an undocumented administrative account with a default password, which allows local users to gain privileges via the expert command...
Multiple Cisco Security Monitoring, Analysis and Response System (CS-MARS) backdoors
Undocumented account 'pnadmin' with standard password allows remote access to device. Undocumented 'expert' command allow unprivileged user to gain 'root' privileges...
CVE-2002-2142
Technical details (affected products, versions, root cause, remediation) are not publicly provided in the connected documents; monitor for updates.
CVE-2002-2142
An undocumented extension for the Servlet mappings in the Servlet 2.3 specification, when upgrading to WebLogic Server and Express 7.0 Service Pack 1 from BEA WebLogic Server and Express 6.0 through 7.0.0.1, does not prepend a "/" character in certain URL patterns, which prevents the proper...