critical9.8Public exploit code
CVE-2001-1291
The telnet server for 3Com hardware such as PS40 SuperStack II does not delay or disconnect remote attackers who provide an incorrect username or password, whi…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- 3Com SuperStack II PS Hub 40 - TelnetD Weak Password Protection2001-07-12 · remote · hardware · Verified
Impact
The telnet server for 3Com hardware such as PS40 SuperStack II does not delay or disconnect remote attackers who provide an incorrect username or password, which makes it easier to break into the server via brute force password guessing.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| 3com | Superstack Ii Ps Hub 40 Firmware | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/archive/1/196957
- http://www.securityfocus.com/bid/3034
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6855
- http://www.securityfocus.com/archive/1/196957
- http://www.securityfocus.com/bid/3034
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6855