ID de Prueba:	1.3.6.1.4.1.25623.1.0.13839
Categoría:	Default Accounts
Título:	eSeSIX Thintune Thin Client Multiple Vulnerabilities
Resumen:	Multiple security vulnerabilities have been found in Thintune,; one of them is a backdoor password ('jstwo') allowing complete access to the system.
Descripción:	Summary: Multiple security vulnerabilities have been found in Thintune, one of them is a backdoor password ('jstwo') allowing complete access to the system. Solution: No known solution was made available for at least one year since the disclosure of this vulnerability. Likely none will be provided anymore. General solution options are to upgrade to a newer release, disable respective features, remove the product or replace the product by another one. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2004-2048 BugTraq ID: 10794 http://www.securityfocus.com/bid/10794 Bugtraq: 20040724 eSeSIX Thintune thin client multiple vulnerabilities (Google Search) http://marc.info/?l=bugtraq&m=109068491801021&w=2 http://www.osvdb.org/8246 http://securitytracker.com/id?1010770 http://secunia.com/advisories/12154 XForce ISS Database: thintune-password-gain-access(16790) https://exchange.xforce.ibmcloud.com/vulnerabilities/16790 Common Vulnerability Exposure (CVE) ID: CVE-2004-2049 http://www.osvdb.org/8247 XForce ISS Database: thintune-plaintext-passwords(16795) https://exchange.xforce.ibmcloud.com/vulnerabilities/16795 Common Vulnerability Exposure (CVE) ID: CVE-2004-2050 http://www.osvdb.org/8248 XForce ISS Database: thintune-password-gain-privileges(16808) https://exchange.xforce.ibmcloud.com/vulnerabilities/16808 Common Vulnerability Exposure (CVE) ID: CVE-2004-2051 http://www.osvdb.org/8249 XForce ISS Database: thintune-url-obtain-information(16798) https://exchange.xforce.ibmcloud.com/vulnerabilities/16798
Copyright	Copyright (C) 2004 Noam Rathaus

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.