ALPHA Ethernet Adapter II Web-Manager 3.40.2 authentication bypass

QQ空间 新浪微博 微信 QQ facebook twitter
漏洞ID 1050526 漏洞类型
发布时间 2010-07-02 更新时间 2010-07-02
CVE编号 N/A CNNVD-ID N/A
漏洞平台 N/A CVSS评分 N/A
|漏洞来源
https://cxsecurity.com/issue/WLB-2010070017
|漏洞详情
漏洞细节尚未披露
|漏洞EXP
Title
-----
DDIVRT-2010-29 ALPHA Ethernet Adapter II Web-Manager 3.40.2
Authentication Bypass

Severity
--------
High

Date Discovered
---------------
April 30th, 2010

Discovered By
-------------
Digital Defense, Inc. Vulnerability Research Team
Credit: Edward Bullard, James Robertson and r@b13$

Vulnerability Description
-------------------------
This version of Web-Manager contains a vulnerability which an intruder
can leverage to gain read and write access to configuration settings
through the device's web administration interface, leading to a full
host compromise.

Solution Description
--------------------
No patch is available at this time.

Tested Systems / Software (with versions)
------------------------------------------
Ubuntu Linux 9.10: Mozilla Firefox 3.5.9
Windows XP Professional Service Pack 3: Windows Internet Explorer
7.0.5730.13, Mozilla Firefox 3.6.3

Vendor Contact
--------------
Vendor Name: Adaptive Micro Systems Inc.
Vendor Website: http://www.adaptivedisplays.com/Default.asp


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/