Basic search

K
securityvulnsSecurityvulnsSECURITYVULNS:DOC:24170
HistoryJul 07, 2010 - 12:00 a.m.

DDIVRT-2010-29 ALPHA Ethernet Adapter II Web-Manager 3.40.2 Authentication Bypass

2010-07-0700:00:00
vulners.com
107

Title

DDIVRT-2010-29 ALPHA Ethernet Adapter II Web-Manager 3.40.2 Authentication Bypass

Severity

High

Date Discovered

April 30th, 2010

Discovered By

Digital Defense, Inc. Vulnerability Research Team
Credit: Edward Bullard, James Robertson and r@b13$

Vulnerability Description

This version of Web-Manager contains a vulnerability which an intruder can leverage to gain read and write
access to configuration settings through the device's web administration interface, leading to a full host
compromise.

Solution Description

No patch is available at this time.

Tested Systems / Software (with versions)

Ubuntu Linux 9.10: Mozilla Firefox 3.5.9
Windows XP Professional Service Pack 3: Windows Internet Explorer 7.0.5730.13, Mozilla Firefox 3.6.3

Vendor Contact

Vendor Name: Adaptive Micro Systems Inc.
Vendor Website: http://www.adaptivedisplays.com/Default.asp