Multi-Tech ProxyServer products MTPSR1-100, MTPSR1-120, MTPSR1-202ST, MTPSR2-201, and MTPSR3-200 ship with a null password, which allows remote attackers to gain administrative privileges via Telnet or HTTP.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Proxyserver | Multi-tech | mtpsr1-100 (including) | mtpsr1-100 (including) |
| Proxyserver | Multi-tech | mtpsr1-120 (including) | mtpsr1-120 (including) |
| Proxyserver | Multi-tech | mtpsr1-202st (including) | mtpsr1-202st (including) |
| Proxyserver | Multi-tech | mtpsr2-201 (including) | mtpsr2-201 (including) |
| Proxyserver | Multi-tech | mtpsr3-200 (including) | mtpsr3-200 (including) |
References
- http://archives.neohapsis.com/archives/bugtraq/2002-12/0105.html
- http://www.kb.cert.org/vuls/id/495705
- http://www.securityfocus.com/bid/7203
- https://exchange.xforce.ibmcloud.com/vulnerabilities/10845
- http://archives.neohapsis.com/archives/bugtraq/2002-12/0105.html
- http://www.kb.cert.org/vuls/id/495705
- http://www.securityfocus.com/bid/7203
- https://exchange.xforce.ibmcloud.com/vulnerabilities/10845