Threat level definition
Search:
Home
Bugtraq
Vulnerabilities
Mailing Lists
Jobs
Tools
Beta Programs
News
Infocus
Foundations
Microsoft
Unix
IDS
Incidents
Virus
Pen-Test
Firewalls
Columnists
Mailing Lists
Newsletters
Bugtraq
Focus on IDS
Focus on Linux
Focus on Microsoft
Forensics
Pen-test
Security Basics
Vuln Dev
Vulnerabilities
Jobs
Job Opportunities
Resumes
Job Seekers
Employers
Tools
RSS
News
Vulns
Security Research
BugTraq
Back to list
|
Post reply
Nokia IPSO Vulnerability
Apr 23 2003 06:27PM
Jonas Eriksson (je sekure net)
(1 replies)
There is a remote security vulnerability in the Nokia IPSO operating
system.
Anyone with access to the webgui (Voyager) on the Nokia IP-box
can read any file on the system.
For example, login as the user 'monitor' (disabled by default)
and use the readfile.tcl to read any file:
http://x.x.x.x/cgi-bin/readfile.tcl?file=/etc/master.passwd
Tested on IPSO 3.6-FCS6
Regards,
Jonas Eriksson
http://sekure.net
[ reply ]
RE: Nokia IPSO Vulnerability
Apr 24 2003 04:32PM
Jorge Merlino (jmerlino easynet com uy)
(2 replies)
Re: Nokia IPSO Vulnerability
Apr 24 2003 06:34PM
Damieon Stark (visigoth securitycentric com)
(1 replies)
Re: Nokia IPSO Vulnerability
Apr 24 2003 10:23PM
Shawn Duffy (pakkit codepiranha org)
Re: Nokia IPSO Vulnerability
Apr 24 2003 05:43PM
Valdis Kletnieks vt edu
(1 replies)
RE: Nokia IPSO Vulnerability
Apr 24 2003 06:49PM
Jorge Merlino (jmerlino easynet com uy)
Privacy Statement
Copyright 2008, SecurityFocus
There is a remote security vulnerability in the Nokia IPSO operating
system.
Anyone with access to the webgui (Voyager) on the Nokia IP-box
can read any file on the system.
For example, login as the user 'monitor' (disabled by default)
and use the readfile.tcl to read any file:
http://x.x.x.x/cgi-bin/readfile.tcl?file=/etc/master.passwd
Tested on IPSO 3.6-FCS6
Regards,
Jonas Eriksson
http://sekure.net
[ reply ]