IBM TotalStorage DS400 Remote Telnet Backdoor Vulnerability
BID:24452
Info
IBM TotalStorage DS400 Remote Telnet Backdoor Vulnerability
| Bugtraq ID: | 24452 |
| Class: | Design Error |
| CVE: |
CVE-2007-3232 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 12 2007 12:00AM |
| Updated: | May 07 2015 05:37PM |
| Credit: | Knud Erik Højgaard <[email protected]> discovered this issue. |
| Vulnerable: |
IBM TotalStorage DS400 4.15 |
| Not Vulnerable: | |
Discussion
IBM TotalStorage DS400 Remote Telnet Backdoor Vulnerability
IBM TotalStorage DS400 is prone to a remote telnet backdoor vulnerability. This issue occurs because of an undocumented telnet server as well as accounts without passwords that may be present in affected devices.
Successfully exploiting this issue allows remote attackers to gain superuser-level access to affected devices.
This issue affects devices with firmware version 4.15 installed; other versions may also be affected.
IBM TotalStorage DS400 is prone to a remote telnet backdoor vulnerability. This issue occurs because of an undocumented telnet server as well as accounts without passwords that may be present in affected devices.
Successfully exploiting this issue allows remote attackers to gain superuser-level access to affected devices.
This issue affects devices with firmware version 4.15 installed; other versions may also be affected.
Exploit / POC
IBM TotalStorage DS400 Remote Telnet Backdoor Vulnerability
Attackers can use a telnet client to exploit this issue.
Attackers can use a telnet client to exploit this issue.
Solution / Fix
IBM TotalStorage DS400 Remote Telnet Backdoor Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
IBM TotalStorage DS400 Remote Telnet Backdoor Vulnerability
References:
References: