Bugtraq mailing list archives

RE: cayman strikes again


From: "Paul Allman" <sandbank () gte net>
Date: Mon, 16 Jul 2001 11:29:39 -0400

my cayman 2e allows anyone to login with any character string (but does not
grant admin abilities)

paul allman

-----Original Message-----
From: Joshua Fritsch [mailto:joshua.fritsch () nyfix com]
Sent: Wednesday, July 11, 2001 6:50 PM
To: 'Russell Handorf '; 'bugtraq () securityfocus com ';
'klp () securityfocus com '
Subject: RE: cayman strikes again


try using '}' as a username without a password for cayman routers.

I believe that in some circumstances, you can get in with *any* character
string...more as an identifier than a real login. But I don't have equipment
to test on, so I cannot confirm this.

Anyone?

-J


Current thread: