Vulnerability-Lookup

GHSA-765G-QXMJ-PJRX

Vulnerability from github – Published: 2022-04-30 18:13 – Updated: 2025-04-03 03:37

Details

NetStructure 7110 and 7180 have undocumented accounts (servnow, root, and wizard) whose passwords are easily guessable from the NetStructure's MAC address, which could allow remote attackers to gain root access.

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2000-0384"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2000-05-08T04:00:00Z",
    "severity": "HIGH"
  },
  "details": "NetStructure 7110 and 7180 have undocumented accounts (servnow, root, and wizard) whose passwords are easily guessable from the NetStructure\u0027s MAC address, which could allow remote attackers to gain root access.",
  "id": "GHSA-765g-qxmj-pjrx",
  "modified": "2025-04-03T03:37:00Z",
  "published": "2022-04-30T18:13:32Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2000-0384"
    },
    {
      "type": "WEB",
      "url": "http://216.188.41.136"
    },
    {
      "type": "WEB",
      "url": "http://www.l0pht.com/advisories/ipivot7180.html"
    },
    {
      "type": "WEB",
      "url": "http://www.lopht.com/advisories/ipivot7110.html"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/1182"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/1183"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

CVE-2000-0384 (GCVE-0-2000-0384)

Vulnerability from cvelistv5 – Published: 2000-06-15 04:00 – Updated: 2024-08-08 05:14

Summary

Severity ?

No CVSS data available.

CWE

Assigner

mitre

References

URL

Tags

	http://www.securityfocus.com/bid/1183	vdb-entryx_refsource_BID
	http://www.lopht.com/advisories/ipivot7110.html	vendor-advisoryx_refsource_L0PHT
	http://www.securityfocus.com/bid/1182	vdb-entryx_refsource_BID
	http://www.l0pht.com/advisories/ipivot7180.html	vendor-advisoryx_refsource_L0PHT
	http://216.188.41.136/	x_refsource_CONFIRM

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-08T05:14:21.456Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "1183",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/1183"
          },
          {
            "name": "20000508 NetStructure 7180 remote backdoor vulnerability",
            "tags": [
              "vendor-advisory",
              "x_refsource_L0PHT",
              "x_transferred"
            ],
            "url": "http://www.lopht.com/advisories/ipivot7110.html"
          },
          {
            "name": "1182",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/1182"
          },
          {
            "name": "20000508 NetStructure 7110 console backdoor",
            "tags": [
              "vendor-advisory",
              "x_refsource_L0PHT",
              "x_transferred"
            ],
            "url": "http://www.l0pht.com/advisories/ipivot7180.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://216.188.41.136/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2000-05-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "NetStructure 7110 and 7180 have undocumented accounts (servnow, root, and wizard) whose passwords are easily guessable from the NetStructure\u0027s MAC address, which could allow remote attackers to gain root access."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2003-03-21T10:00:00",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "1183",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/1183"
        },
        {
          "name": "20000508 NetStructure 7180 remote backdoor vulnerability",
          "tags": [
            "vendor-advisory",
            "x_refsource_L0PHT"
          ],
          "url": "http://www.lopht.com/advisories/ipivot7110.html"
        },
        {
          "name": "1182",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/1182"
        },
        {
          "name": "20000508 NetStructure 7110 console backdoor",
          "tags": [
            "vendor-advisory",
            "x_refsource_L0PHT"
          ],
          "url": "http://www.l0pht.com/advisories/ipivot7180.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://216.188.41.136/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2000-0384",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "NetStructure 7110 and 7180 have undocumented accounts (servnow, root, and wizard) whose passwords are easily guessable from the NetStructure\u0027s MAC address, which could allow remote attackers to gain root access."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "1183",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/1183"
            },
            {
              "name": "20000508 NetStructure 7180 remote backdoor vulnerability",
              "refsource": "L0PHT",
              "url": "http://www.lopht.com/advisories/ipivot7110.html"
            },
            {
              "name": "1182",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/1182"
            },
            {
              "name": "20000508 NetStructure 7110 console backdoor",
              "refsource": "L0PHT",
              "url": "http://www.l0pht.com/advisories/ipivot7180.html"
            },
            {
              "name": "http://216.188.41.136/",
              "refsource": "CONFIRM",
              "url": "http://216.188.41.136/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2000-0384",
    "datePublished": "2000-06-15T04:00:00",
    "dateReserved": "2000-06-14T00:00:00",
    "dateUpdated": "2024-08-08T05:14:21.456Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

GHSA-765G-QXMJ-PJRX

CVE-2000-0384 (GCVE-0-2000-0384)

Tags

Sightings

Nomenclature