Vulnerability Development mailing list archives
Updated Default Account Database
From: deceased1 () HOME COM (Eric Knight)
Date: Thu, 6 Jul 2000 17:07:12 -0600
VULN-DEV:
From reading the articles people have posted, there were some requests to
"fan out" the list into more fields than just three or four. I've changed my format around from ascii to a spreadsheet, and there is a CSV file attached containing the spreadsheet with the fanned out model. You can load it up with any favorite spreadsheet program. The spreadsheet has the following fields: o Manufacturer o Product o Version o Protocol o User ID o Password o Access o Comments I've also added everything posted on the list so far, including all the BIOS information (except all the "unknown" ones -- those will be added later) I'd like to request that people with more experience than I do look at the fanned out list. In particular, I'm not entirely sure about protocols (if all that networking equipment is connected to via console, telnet, http, or some management tool), user access (especially in case of old or unusual equipment), and versions (especially in the Cisco area.) The database has gotten fairly long (over 700 entries), and I'm considering posting it to BUGTRAQ because it really is a useful resource that people there would find fascinating. In of itself, it isn't a "new bug" but instead is a new and improved version of an old security problem. However, I'm not going to do so until the product is fully "developed" and that means some cleaning up and testing. If you would rather see a better looking HTML or true Excel version, they are available at http://www.securityparadigm.com/defaultpw.htm Take it easy, Eric Knight knight () securityparadigm com <HR NOSHADE> <UL> <LI>application/octet-stream attachment: dad.csv </UL>
Current thread:
- Re: BitchX /ignore bug, (continued)
- Re: BitchX /ignore bug Schlachter, Jake (Jul 07)
- Re: BitchX /ignore bug Bluefish (Jul 08)
- Re: BitchX /ignore bug Christofer C. Bell (Jul 08)
- Re: BitchX /ignore bug Erich Meier (Jul 11)
- Re: BitchX /ignore bug Ron DuFresne (Jul 07)
- Re: BitchX /ignore bug Juan M. Courcoul (Jul 07)
- remote exploit Jim Stickley (Jul 07)
- Re: remote exploit Bluefish (Jul 08)
- Re: remote exploit Gerardo Richarte (Jul 10)
- Re: BitchX /ignore bug Matthew S. Hallacy (Jul 06)
- Updated Default Account Database Eric Knight (Jul 06)
- Re: Updated Default Account Database Jesus D. Muz@oz Largo (Jul 12)
- Re: Updated Default Account Database Nathan Einwechter (Jul 12)
- some things to play with Firstname Lastname (Jul 13)
- Re: some things to play with Vladimir Dubrovin (Jul 14)
- Re: some things to play with Firstname Lastname (Jul 14)
- Re: some things to play with Vladimir Dubrovin (Jul 17)
- Red Hat Linux 6.2 - VIM 5.6 Paulo Ribeiro (Jul 12)
- Re: BitchX /ignore bug Jeremy Gaddis (Jul 06)
- (NT) When exploit CGI's that allow viewing of files... Marc (Jul 06)
- Re: (NT) When exploit CGI's that allow viewing of files... Blue Boar (Jul 06)