CVE

Id
3301  
CVE No.
CVE-2001-0484  
Status
Candidate  
Description
Tektronix PhaserLink 850 does not require authentication for access to configuration pages such as _ncl_subjects.shtml and _ncl_items.shtml, which allows remote attackers to modify configuration information and cause a denial of service by accessing the pages.  
Phase
Modified (20020223-01)  
Votes
ACCEPT(1) Renaud | MODIFY(2) Baker, Frech | NOOP(6) Balinsky, Cole, Oliver, Wall, Williams, Ziese | REVIEWING(1) Christey  
Comments
Williams> there was an issue with admin passwd storage for Tektronix Phaser 360, 740, 780, 840 | Frech> XF:tektronix-phaserlink-webserver-backdoor(6482) | Baker> 750DP and 930 printers should be added | http://www.securityfocus.com/archive/1/181007 | CHANGE> [Williams changed vote from REVIEWING to NOOP] | Christey> CVE-1999-1508 covered the older versions discussed | by Ken Williams. These may be duplicates. | This one is BID:2659 | http://www.securityfocus.com/bid/2659  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
13957 3301 CVE-2001-0484 BUGTRAQ:20010425 Tektronix (Xerox) PhaserLink 850 Webserver Vulnerability (NEW)  View
13958 3301 CVE-2001-0484 URL:http://archives.neohapsis.com/archives/bugtraq/2001-04/0482.html  View
13959 3301 CVE-2001-0484 XF:tektronix-phaserlink-webserver-backdoor(6482)  View

Related JVN