Visit our newest sister site!
Hundreds of free aircraft flight manuals
Civilian • Historical • Military • Declassified • FREE!


TUCoPS :: Web :: Apps :: web5122.htm

WebNews default hardcoded passwords



25th Feb 2002 [SBWID-5122]
COMMAND

	WebNews default hardcoded passwords

SYSTEMS AFFECTED

	1.1k

PROBLEM

	Shai [http://www.akn-systems.com] found following :
	

	The Netwin Webnews version 1.1k CGI (binaries) contains 4 default  users
	(within the binary) that can not be removed.
	

	While running the \"strings\" command  over  the  file  webnews.pl,  the
	users are revealed:
	

	

	testweb

	newstest

	alwn3845

	imaptest

	alwi3845

	wtest3452

	testweb2

	wtest4879

	

	

	For instance, testweb is the username and newstest is it\'s password.
	

	

SOLUTION

	Nothing yet.


TUCoPS is optimized to look best in Firefox® on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2014 AOH