bugtraq - Re: [Full-Disclosure] [PoC] Nasty bug(s) found in Axis Network Camera/Video Servers

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <200408240353.i7O3rP3w002125@ns.wcd.se>
Date: Tue, 24 Aug 2004 05:53:25 +0200 (CEST)
From: bashis <mcw@....se>
To: bugtraq@...urityfocus.com
Subject: Re: [Full-Disclosure] [PoC] Nasty bug(s) found in Axis Network Camera/Video Servers


 
 > password issues known to exist..
 Yes.
 
 > http://www.google.com/search?hl=en&lr=&ie=UTF-8&newwindow=1&safe=off&q=axis+camera+exploit
 >
 > http://www.google.com/search?hl=en&lr=&ie=UTF-8&newwindow=1&safe=off&q=axis+camera+vulnerability
 > 
 > or...
 > http://www2.corest.com/common/showdoc.php?idx=329&idxseccion=10
 > http://www.securityfocus.com/bid/3640/exploit/
 Not the same stuff..
 
 'axis-wh00t.sh' adding a new user 'wh00t' with password 'wh00t' with Admin
 priviliges, as anonymous viewer. No matter what password root have.
 
 Read it, try it, understand it, before useless postings..
 
 > >To: security@...s.com
 > >Date: Mon, 16 Aug 2004 22:48:38 +0200 (CEST)
 > 
 > try the contact page?
 > http://www.axis.com/corporate/contact.htm
 
 No mailer-daemon received on 'security@...s.com' post.
 
 Have a nice day
 /bashis