Vulnerabilities > CVE-2001-1339 - Improper Restriction of Excessive Authentication Attempts vulnerability in Anybus Ipc@Chip Firmware
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
Beck IPC GmbH IPC@CHIP telnet service does not delay or disconnect users from the service when bad passwords are entered, which makes it easier for remote attackers to conduct brute force password guessing attacks.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| OS | 1 | |
| Hardware | 1 |
Common Weakness Enumeration (CWE)
Exploit-Db
| description | Beck IPC GmbH IPC@CHIP TelnetD Login Account Brute Force Vulnerability. CVE-2001-1339. Remote exploits for multiple platform |
| id | EDB-ID:20881 |
| last seen | 2016-02-02 |
| modified | 2001-05-24 |
| published | 2001-05-24 |
| reporter | Courtesy Sentry Research Labs |
| source | https://www.exploit-db.com/download/20881/ |
| title | Beck IPC GmbH IPC@CHIP TelnetD Login Account Brute Force Vulnerability |
References
- http://cert.uni-stuttgart.de/archive/bugtraq/2001/06/msg00010.html
- http://cert.uni-stuttgart.de/archive/bugtraq/2001/06/msg00010.html
- http://www.iss.net/security_center/static/6605.php
- http://www.iss.net/security_center/static/6605.php
- http://www.kb.cert.org/vuls/id/198979
- http://www.kb.cert.org/vuls/id/198979
- http://www.securityfocus.com/archive/1/186418
- http://www.securityfocus.com/archive/1/186418
- http://www.securityfocus.com/bid/2771
- http://www.securityfocus.com/bid/2771