Telecom Italia Alice Pirelli routers Backdoor from internal LAN/WAN

No description provided by source. saxdax & drpepperONE Discovered embedded backdoor to activate telnet/ftp/tftp/web extended admin interface with Admin privileges, from internal network lan on Alice ADSL CPE Modem/Router, manufactered by Pirelli based on Broadcom platform. saxdax & drpepperONE...

Telecom Italia Alice Pirelli routers - Backdoor from internal LANWAN

Telecom Italia Alice Pirelli routers - Backdoor from internal LANWAN saxdax & drpepperONE Discovered embedded backdoor to activate telnet/ftp/tftp/web extended admin interface with Admin privileges, from internal network lan on Alice ADSL CPE Modem/Router, manufactered by Pirelli based on Broadco...

Telecom Italia Alice Pirelli routers - Backdoor from internal LAN/WAN

saxdax & drpepperONE Discovered embedded backdoor to activate telnet/ftp/tftp/web extended admin interface with Admin privileges, from internal network lan on Alice ADSL CPE Modem/Router, manufactered by Pirelli based on Broadcom platform. saxdax & drpepperONE Router Vendor: Alice Telecom Italia...

Gentoo Security Advisory GLSA 200406-20 (Openswan)

The remote host is missing updates announced in advisory GLSA 200406-20. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200406-20 (Openswan)

The remote host is missing updates announced in advisory GLSA 200406-20. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

wan-sql.txt

. . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com --- d3hydr8 - rsauron - P47r1ck - r45c4l - C1c4Tr1Z - bennu --- QKrun1x - skillfaker - Croathack - Optyx - Nuclear --- Eliminator and to...

CVE-2008-3525

Vulnerability (CVE-2008-3525) affects the Linux kernel 2.6.26.3 wan driver (sbni.c) where sbni_ioctl fails to perform CAP_NET_ADMIN checks before handling four ioctls (SIOCDEVRESINSTATS, SIOCDEVSHWSTATE, SIOCDEVENSLAVE, SIOCDEVEMANSIPATE). This permits a local user to bypass intended capability r...

CVE-2008-2812

The Linux kernel before 2.6.25.10 does not properly perform tty operations, which allows local users to cause a denial of service system crash or possibly gain privileges via vectors involving NULL pointer dereference of function pointers in 1 hamradio/6pack.c, 2 hamradio/mkiss.c, 3...

PT-2008-4251 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.25.10 Description: The issue allows local users to cause a denial of service, potentially leading to a system crash, or possibly gain privileges. This is achieved through vectors involving NULL pointer...

OmniPCX Office远程信息泄露漏洞

BUGTRAQ ID: 28758 CVECAN ID: CVE-2008-1331 阿尔卡特的OmniPCX Office是一套为中小型企业设计的统一通信解决方案。 OmniPCX Office的Internet Access服务所使用的一个CGI脚本没有正确地过滤某些特定参数，允许远程攻击者从Internet检索敏感信息。 Alcatel-Lucent OmniPCX Office = 210/061.1 临时解决方法： 如果您不能立刻安装补丁或者升级，NSFOCUS建议您采取以下措施以降低威胁： 禁止从Internet的WBM/WCA访问 对于R2.1到R4.1版本：...

CVE-2008-1260

The CVE-2008-1260 entry affects the Zyxel P-2602HW-D1A router running firmware 3.40(AJZ.1). The described vulnerabilities are CSRF flaws that let remote attackers (no authentication required) influence the device: (1) expose the admin web server on WAN via WWWAccessInterface in Forms/RemMagWWW_1,...

Design/Logic Flaw

The Aztech DSL600EU router, when WAN access to the web interface is disabled, does not properly block inbound traffic on TCP port 80, which allows remote attackers to connect to the web interface by guessing a TCP sequence number, possibly involving spoofing of an ARP packet, a related issue to...

Cisco广域应用服务CIFS拒绝服务漏洞

BUGTRAQ ID: 24956 Cisco广域应用服务（WAAS）解决方案结合硬件加速和WAN优化技术缓解应用和传输的等待时间。 WAAS的实现上存在漏洞，远程攻击者可能利用此漏洞导致设备不可用。 一些版本的WAAS软件中存在拒绝服务漏洞，可能导致某些运行WAAS软件（WAE设备和NM-WAE-502模块）的设备停止处理所有类型的通讯，包括通过设备的通讯（数据通讯）和终止于设备的通讯（管理通讯）。如果WAAS设备中存在使用所配置CIFS优化的Edge Services且在139和445端口上接收TCP...

Vonage VoIP phones weak defaults

Administrative interface in available via WAN connection with username/password of user/user...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in 1 PreSearch.html and 2 PreSearch.class in Cisco Secure Access Control Server ACS, VPN Client, Unified Personal Communicator, MeetingPlace, Unified MeetingPlace, Unified MeetingPlace Express, CallManager, IP Communicator, Unified Video Advantage...

ProCheckUp Security Advisory 2006.14

PR06-14: IP Phones based on Centrality Communications/Aredfox PA168 chipset weak session management vulnerability This advisory has been published following consultation with UK NISCC http://www.niscc.gov.uk/ Date Found: 3rd November 2006 Date Public: 22nd January 2007 Vulnerable: Phones confirme...

PA168 Chipset IP Phones Weak Session Management Exploit

No description provided by source. !/bin/bash PR06-14: IP Phones based on Centrality Communications/Aredfox PA168 chipset weak session management vulnerability Author: Adrian Pastor adrian.pastor-AT-procheckup.com from ProCheckUp This advisory has been published following consultation with UK NIS...

Packeteer PacketWise CLI overflow DoS

Product: Packeteer PacketShaper Model: 9500/ISP Software: PacketWise 8.x possibly others =========== Background =========== Packeteer creates bandwidth management solutions such as the PacketShaper which "is the ultimate scalable platform for optimized WAN application performance—the only...

Linksys WRT54GXv2 UPnP请求处理漏洞

WRT54GXv2是一款流行的无线宽带路由器。 WRT54GXv2的UPnP功能的实现上存在漏洞，远程攻击者可能利用此漏洞绕过某些安全限制。 如果启用了UPnP的话，WRT54GXv2就会接受发送到WAN接口UPnP请求，攻击者可以通过向设备发送AddPortMapping命令打开任意端口。 Linksys WRT54GX v2 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.linksys.com...

SOL2593 - Buffer overflow in zlib - CAN-2003-0107

Note: Versions that are not listed in this Solution have not been evaluated for vulnerability to this security advisory. For information about F5 Networks' security policy regarding evaluating older and unsupported versions of F5 Networks products, refer to SOL4602: Overview of F5 Networks securi...