ZyXEL ZyWALL Quagga及Zebra进程默认帐号口令漏洞

BUGTRAQ ID: 28184 CVECAN ID: CVE-2008-1160 Zywall是一款由Zyxel开发和维护的硬件防火墙。 Zyxel的Quagga和Zebra路由守护程序访问认证的实现上存在漏洞，远程攻击者可能利用此漏洞获取非授权访问。 即使已经更改了设备的口令，仍没有更改登录到Quagga/Zebra守护程序所需的口令。这些守护程序运行在TCP 2601、2602（Quagga/RIP）和2604（Quagga/OSPF）端口上。攻击者可以使用默认的口令zebra登录到Quagga/Zebra服务，查看并操控设备的路由信息。 ZyWall 1050 ZyXEL...

Hardcoded credentials

ZyXEL ZyWALL 1050 has a hard-coded password for the Quagga and Zebra processes that is not changed when it is set by a user, which allows remote attackers to gain privileges...

CVE-2008-1160

ZyXEL ZyWALL 1050 has a hard-coded password for the Quagga and Zebra processes that is not changed when it is set by a user, which allows remote attackers to gain privileges...

CVE-2008-1160: Use of Hard-coded Credentials

ZyXEL ZyWALL 1050 has a hard-coded password for the Quagga and Zebra processes that is not changed when it is set by a user, which allows remote attackers to gain privileges...

CVE-2008-1160

ZyXEL ZyWALL 1050 has a hard-coded password for the Quagga and Zebra processes that is not changed when it is set by a user, which allows remote attackers to gain privileges...

PT-2008-1001 · Zyxel +1 · Zywall Usg 300 +3

Name of the Vulnerable Software and Affected Versions: ZyXEL ZyWALL 1050 affected versions not specified ZyXEL ZyWALL USG 300 affected versions not specified Description: The issue is related to a hard-coded password for the Quagga and Zebra processes in the ZyXEL ZyWALL firewall/router operating...

ZyXEL ZyWALL Quagga/Zebra Remote Root Vulnerability

Name: ZyXEL ZyWALL Quagga/Zebra Remote Root Vulnerability Release Date: 10 March 2008 Discover: Pranav Joshi [email protected] Vendor: ZyXEL Products Affected: ZyWALL Status on other affected products & firmwares pending from vendor’s end CVE-2008-1160 BID 28184 ---------------------------...

ZyXEL ZyWALL Quagga/Zebra (default pass) Remote Root Vulnerability

No description provided by source. Name: ZyXEL ZyWALL Quagga/Zebra Remote Root Vulnerability Release Date: 10 March 2008 Discover: Pranav Joshi [email protected] Vendor: ZyXEL Products Affected: ZyWALL Status on other affected products & firmwares pending from vendor’s end CVE-2008-1160 BID...

ZyXel ZyWall unauthorized access

It's possible to manipulate with routing via RIP and OSPF with default non-changeble account 'zebra'...

ZYXEL ZyWALL QuaggaZebra - Default Password Remote Code Execution

ZYXEL ZyWALL QuaggaZebra - Default Password Remote Code Execution Name: ZyXEL ZyWALL Quagga/Zebra Remote Root Vulnerability Release Date: 10 March 2008 Discover: Pranav Joshi Vendor: ZyXEL Products Affected: ZyWALL Status on other affected products & firmwares pending from vendor’s end...

ZyXEL ZyWALL Quagga/Zebra (default pass) Remote Root Vulnerability

Exploit for hardware platform in category remote exploits ================================================================== ZyXEL ZyWALL Quagga/Zebra default pass Remote Root Vulnerability ================================================================== Name: ZyXEL ZyWALL Quagga/Zebra Remote...

ZYXEL ZyWALL Quagga/Zebra - 'Default Password' Remote Code Execution

Name: ZyXEL ZyWALL Quagga/Zebra Remote Root Vulnerability Release Date: 10 March 2008 Discover: Pranav Joshi Vendor: ZyXEL Products Affected: ZyWALL Status on other affected products & firmwares pending from vendor’s end CVE-2008-1160 BID 28184 --------------------------- Technical Details...

Debian Security Advisory DSA 415-1 (zebra)

The remote host is missing an update to zebra announced via advisory DSA 415-1. OpenVAS Vulnerability Test $Id: deb4151.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 415-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 415-1 (zebra)

The remote host is missing an update to zebra announced via advisory DSA 415-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 7 Update: quagga-0.99.9-1.fc7

Quagga is a free software that manages TCP/IP based routing protocol. It takes multi-server and multi-thread approach to resolve the current complexity of the Internet. Quagga supports BGP4, BGP4+, OSPFv2, OSPFv3, RIPv1, RIPv2, and RIPng. Quagga is intended to be used as a Route Server and a Rout...

[SECURITY] Fedora Core 6 Update: quagga-0.99.7-1.fc6

Quagga is a free software that manages TCP/IP based routing protocol. It takes multi-server and multi-thread approach to resolve the current complexity of the Internet. Quagga supports BGP4, BGP4+, OSPFv2, OSPFv3, RIPv1, RIPv2, and RIPng. Quagga is intended to be used as a Route Server and a Rout...

RHEL 2.1 : zebra (RHSA-2006:0533)

Updated zebra packages that fix several security vulnerabilities are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. GNU Zebra is a free software that manages TCP/IP based routing protocol. An information disclosure flaw was foun...

zebra security update

CentOS Errata and Security Advisory CESA-2006:0533-01 Updated zebra packages that fix several security vulnerabilities are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. GNU Zebra is a free software that manages TCP/IP based...

Moderate: Red Hat Security Advisory: zebra security update

Updated zebra packages that fix several security vulnerabilities are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. GNU Zebra is a free software that manages TCP/IP based routing protocol. An information disclosure flaw was foun...

Zebra and Quagga Remote DoS

A remote DoS exists in Zebra and/or Quagga when sending a telnet option delimiter with no actual option data. An attacker may exploit this flaw to prevent this host from doing proper routing. This affects all versions from 0.90a to 0.93b. OpenVAS Vulnerability Test $Id: zebrados.nasl 6046...