CVE-2010-2965

CVE-2010-2965 affects Wind River VxWorks targets (6.x, 5.x and earlier), notably Rockwell Automation 1756-ENBT series A with firmware 3.2.6 and 3.6.1. The WDB target agent debug service exposes a UDP 17185 port that can be used by remote attackers to read or modify arbitrary memory, perform funct...

CVE-2010-2966

The INCLUDESECURITY functionality in Wind River VxWorks 6.x, 5.x, and earlier uses the LOGINUSERNAME and LOGINUSERPASSWORD aka LOGINPASSWORD parameters to create hardcoded credentials, which makes it easier for remote attackers to obtain access via a 1 telnet, 2 rlogin, or 3 FTP session...

CVE-2010-2967

The loginDefaultEncrypt algorithm in loginLib in Wind River VxWorks before 6.9 does not properly support a large set of distinct possible passwords, which makes it easier for remote attackers to obtain access via a 1 telnet, 2 rlogin, or 3 FTP session...

CVE-2010-2965

The WDB target agent debug service in Wind River VxWorks 6.x, 5.x, and earlier, as used on the Rockwell Automation 1756-ENBT series A with firmware 3.2.6 and 3.6.1 and other products, allows remote attackers to read or modify arbitrary memory locations, perform function calls, or manage tasks via...

CVE-2010-2968

The CVE concerns Wind River VxWorks’ FTP daemon, where the FTP service does not close the TCP connection after multiple failed login attempts. This behavior allows remote attackers to attempt brute-force access, as described in multiple sources (NVD, Red Hat advisory, CVE CVE-2010-2968 records). ...

CVE-2010-2966

The CVE-2010-2966 issue affects Wind River VxWorks 6.x, 5.x, and earlier where INCLUDE_SECURITY uses LOGIN_USER_NAME and LOGIN_USER_PASSWORD (LOGIN_PASSWORD) to create hardcoded credentials. This enables remote authentication for (1) telnet, (2) rlogin, or (3) FTP sessions. Root cause is hardcode...

CVE-2010-2968: Undefined Security Weakness

The FTP daemon in Wind River VxWorks does not close the TCP connection after a number of failed login attempts, which makes it easier for remote attackers to obtain access via a brute-force attack...

PT-2010-4439

Name of the Vulnerable Software and Affected Versions Wind River VxWorks versions 6.x, 5.x, and earlier Description The issue allows remote attackers to read or modify arbitrary memory locations, perform function calls, or manage tasks via requests to UDP port 17185. This is related to a previous...

CVE-2010-2967: Undefined Security Weakness

The loginDefaultEncrypt algorithm in loginLib in Wind River VxWorks before 6.9 does not properly support a large set of distinct possible passwords, which makes it easier for remote attackers to obtain access via a 1 telnet, 2 rlogin, or 3 FTP session...

CVE-2010-2966: Undefined Security Weakness

The INCLUDESECURITY functionality in Wind River VxWorks 6.x, 5.x, and earlier uses the LOGINUSERNAME and LOGINUSERPASSWORD aka LOGINPASSWORD parameters to create hardcoded credentials, which makes it easier for remote attackers to obtain access via a 1 telnet, 2 rlogin, or 3 FTP session...

Hua-speed online trading platform oday-vulnerability warning-the black bar safety net

Hua-speed online trading platform oday program: China speed online trading platform Vulnerability description:upload, storm library google keywords: inurl:listbuy. asp? class1 EXP test: Copy the code save it as html file html head meta http-equiv="Content-Type" content="text/html; charset=gb2312"...

Wind news site management system any changes to password vulnerabilities-vulnerability warning-the black bar safety net

FoosunCMS is a powerful feature of based on ASP+ACCESS/MSSQL architecture of content management software. Vulnerability analysis: In the file\User\ GetPassword. asp: ElseIf Request. Form"Action" = "step3" then //first 2 Line 8 Call step3 ...... Sub step3 //the 1 9 8 row Dim ppassnew,pconfimpassne...

Wind crossing technology ASP online shopping system 0 9 0 5-1 injection vulnerability-vulnerability warning-the black bar safety net

Wind crossing technology ASP online shopping system 0 9 0 5-1 Multi-file exists injection vulnerability Relates to document: proshow. asp, new. asp and the like. ! Size: 132.91 K Size: 5 0 0 x 3 9 1 Browse: 0 times Click to open a new window to browse the full map! Size: 88.01 K Size: 5 0 0 x 3 9...

The wind phase with the guestbook v3. 2 build 0 9 1 2 0 1 vulnerability-vulnerability warning-the black bar safety net

Wind phase with the guestbook v3. 2 build 0 9 1 2 0 1 multiple vulnerabilities Download Script : http://down.chinaz.com/soft/22331.htm Author : bl4ck Contact : bl4ck4tlivedotcn Blog : http://user.qzone.qq.com/271174530 Dork : No DoRk f0R ScRipT KiDDieS Description : This system is new to write...

Wind news site content management system explosive path vulnerability-vulnerability warning-the black bar safety net

Wind news site content management system the latest burst path vulnerability in! Directly burst the absolute path Methods: Directly in the URL added on the Admin/User/getGroupDebate. asp to it!!!! Microsoft VBScript runtime error-Error '800a01f4' Variable is undefined: 'Conn'...

Wind noise 4.0 SP7 getshell 0day-vulnerability warning-the black bar safety net

Source: Found by: bloodsword, a bink, reproduced please disregard Affected versions:=4.0 sp7, the previous version didn't go to see, estimation also can day. Use Conditions, opens a file upload function, iis6 environment. Vulnerability Description: Create a directory somewhere, name the filter on...

Design/Logic Flaw

The IPv6 Neighbor Discovery Protocol NDP implementation in 1 FreeBSD 6.3 through 7.1, 2 OpenBSD 4.2 and 4.3, 3 NetBSD, 4 Force10 FTOS before E7.7.1.1, 5 Juniper JUNOS, and 6 Wind River VxWorks 5.x through 6.4 does not validate the origin of Neighbor Discovery messages, which allows remote attacke...

CVE-2008-2476

The CVE-2008-2476 issue concerns the IPv6 Neighbor Discovery Protocol (NDP) implementation in several vendors (FreeBSD 6.3–7.1; OpenBSD 4.2–4.3; NetBSD; Force10 FTOS pre-E7.7.1.1; Juniper JUNOS; Wind River VxWorks 5.x–6.4) that does not validate the origin of Neighbor Discovery messages. This all...

CVE-2008-2476: Improper Input Validation

The IPv6 Neighbor Discovery Protocol NDP implementation in 1 FreeBSD 6.3 through 7.1, 2 OpenBSD 4.2 and 4.3, 3 NetBSD, 4 Force10 FTOS before E7.7.1.1, 5 Juniper JUNOS, and 6 Wind River VxWorks 5.x through 6.4 does not validate the origin of Neighbor Discovery messages, which allows remote attacke...

Unfixed XSS vulnerability at wind-academy.net

Security researcher BackDoor, has submitted on 09/05/2008 a cross-site-scripting XSS vulnerability affecting wind-academy.net, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/06/2008. It is currently...