Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Vuln-Dev
[Top] [All Lists]
<prev [Date] next>
[Advanced]
 <prev [Thread] next>

APC Management Vulnerability

from [garys] Network Security [Permanent Link]
Subject: APC Management Vulnerability
Date: 29 Nov 2007 14:41:38 -0000 
We have found a security exploit in the latest APC firmware versions for there 
switched rack PDU products. We have only tested this against the version listed 
below on a AP7932 0u 30amp PDU.

Name:   rpdu
Version:        v3.5.5
Date:   07/18/2007
Time:   11:38:29

Name:   aos
Version:        v3.5.6
Date:   07/18/2007
Time:   10:24:55
Date Reported to APC: 11-28-2007

Discovered by: 
Gary Simat of Total Server Solutions LLC
Randy Kent of Sevaa Group Inc

Steps to reproduce:
1) login to the APC as a user from computer 1
2) Then attempt to login from another computer (we will call this computer 2), 
the User Name and Password will not be editable, so just click Log On. It will 
say someone is already logged in. leave this page up.
3) logout of computer 1
4) simply hit refresh on computer 2 and select to resend the headers. you will 
be logged in as the previously authenticated user.
[More messages with this same subject...]




<Prev in Thread] Current Thread [Next in Thread>
  • APC Management Vulnerability, garys <=
Previous by Date:  Digital Armaments November-December Hacking Challenge: Diffuse Client Application (10.000$ extra), info
Next by Date:  Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability, 3APA3A
Previous by Thread:  Digital Armaments November-December Hacking Challenge: Diffuse Client Application (10.000$ extra), info
Next by Thread:  FreeBSD Security Advisory FreeBSD-SA-07:10.gtar, FreeBSD Security Advisories
Indexes:  [Date] [Thread] [Top] [All Lists]