bugtraq - OptiSwitch remote root compromise

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <20030626030355.GA10951@istc.kg>
Date: Thu, 26 Jun 2003 03:03:55 +0000
From: CrazZzy Slash <slash@...c.kg>
To: bugtraq@...urityfocus.com
Subject: OptiSwitch remote root compromise


Hello bugtraq :)

I've found bug in OptiSwitch 400 and 800 series, maybe another series :) So abou
t: then you connecting to the switch via telnet or console you may gain root acc
ess pressing Crtl+C <cr><cr> so you will :)

Ok here is detailed information...

Manufactor:
MRV Communications, Inc.
http://www.mrv.com

Product:
OptiSwitch 400 / 800 series, possibly others (not tested)
http://www.mrv.com/products/line/optiswitch.php

Exploit:
Press Ctrl+C <cr><cr> while connecting to the switch and you're welcome :) Enjoy
 ;)

Manufactor informed:
No, too busy for this, only for you bugtraq :)

Date 24.06.2003

slash@...c.kg