Home page logo

bugtraq logo Bugtraq mailing list archives

From: Dave Paris <dparis () w3works com>
Date: Fri, 13 Aug 2004 13:11:04 -0400

The Zebra issue is simply a default password/default configuration issue. The documentation _clearly_ states that is should be changed and than an 'enable password' be applied. In neither case does this allow any "exploit" to take place, as you're restricted to the Zebra process and not the OS.

It's no more of an exploit than Oracle's system/manager, sys/change_on_install, or scott/tiger username/password combinations that are installed by default.

Kind Regards,

thanasonic () hack gr wrote:

In-Reply-To: <005e01c48141$4e82f880$0701a8c0 () COOKIE>

Sorry for not mentioning that.Thats why the subject is called "SPECIAL FEATURE" and not a bug.
By the way, the second issue about zebra its true and as i informed about it ,it can be exploited localy or remotely.

Thanks for your reply,

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]