ZyXEL ZyWALL Quagga/Zebra (default pass) Remote Root Vulnerability

2008-03-2200:00:00

Root

www.seebug.org

168

0.183 Low

EPSS

Percentile

96.2%

JSON

No description provided by source.


                                                Name:&nbsp;ZyXEL&nbsp;ZyWALL&nbsp;Quagga/Zebra&nbsp;Remote&nbsp;Root&nbsp;Vulnerability
Release&nbsp;Date:&nbsp;10&nbsp;March&nbsp;2008
Discover:&nbsp;Pranav&nbsp;Joshi&nbsp;&lt;[email protected]&gt;
Vendor:&nbsp;ZyXEL
Products&nbsp;Affected:&nbsp;ZyWALL

(Status&nbsp;on&nbsp;other&nbsp;affected&nbsp;products&nbsp;&amp;&nbsp;firmwares&nbsp;pending&nbsp;from&nbsp;vendor’s&nbsp;end)

&nbsp;CVE-2008-1160

&nbsp;BID&nbsp;28184

---------------------------

Technical&nbsp;Details

---------------------------

The&nbsp;vulnerability&nbsp;in&nbsp;the&nbsp;Quagga/Zebra&nbsp;routing&nbsp;daemon,&nbsp;exists&nbsp;due&nbsp;to&nbsp;the&nbsp;
fact&nbsp;that&nbsp;the&nbsp;appliance&nbsp;fails&nbsp;to&nbsp;change&nbsp;the&nbsp;password&nbsp;needed&nbsp;to&nbsp;login&nbsp;
into&nbsp;the&nbsp;Quagga/Zebra&nbsp;daemon&nbsp;running&nbsp;on&nbsp;ports&nbsp;2601,&nbsp;2602&nbsp;(Quagga/RIP)&nbsp;&amp;&nbsp;
2604&nbsp;(Quagga/OSPF)&nbsp;/TCP,&nbsp;even&nbsp;though&nbsp;the&nbsp;password&nbsp;of&nbsp;the&nbsp;appliance&nbsp;has&nbsp;
been&nbsp;changed&nbsp;an&nbsp;attacker&nbsp;can&nbsp;still&nbsp;use&nbsp;the&nbsp;default&nbsp;password&nbsp;‘zebra’&nbsp;to&nbsp;
log&nbsp;into&nbsp;the&nbsp;Quagga/Zebra&nbsp;service&nbsp;to&nbsp;view&nbsp;and&nbsp;manipulate&nbsp;the&nbsp;routing&nbsp;
information&nbsp;etc.&nbsp;of&nbsp;the&nbsp;appliance.&nbsp;

The&nbsp;vulnerability&nbsp;was&nbsp;discovered&nbsp;on&nbsp;ZyWall&nbsp;1050&nbsp;appliance&nbsp;other&nbsp;versions&nbsp;
could&nbsp;be&nbsp;affected&nbsp;as&nbsp;well.&nbsp;

Information&nbsp;on&nbsp;other&nbsp;vulnerable&nbsp;products&nbsp;and&nbsp;firmwares&nbsp;is&nbsp;pending&nbsp;from&nbsp;
the&nbsp;vendor’s&nbsp;end.&nbsp;

0.183 Low

EPSS

Percentile

96.2%

JSON

Related for SSV:8194