Re: [Full-disclosure] n.runs-SA-2013.001 - Polycom - Command Shell Grants System-Level Access

2013-03-18 Thread some one
I think because if/when someone enables it there is no authentication needed to remote log in as root? On Mar 16, 2013 4:32 PM, "Julius Kivimäki" wrote: > Why exactly is this a bug? > > 2013/3/15 > >> n.runs AG >> http://www.nruns.com/ >> security(at)nruns.com >> n.runs-SA-2013.001 >> 15-Mar-20

Re: [Full-disclosure] n.runs-SA-2013.001 - Polycom - Command Shell Grants System-Level Access

2013-03-16 Thread Julius Kivimäki
Why exactly is this a bug? 2013/3/15 > n.runs AG > http://www.nruns.com/ > security(at)nruns.com > n.runs-SA-2013.001 15-Mar-2013 > ___ > Vendor: Polycom, http://www.polyc

[Full-disclosure] n.runs-SA-2013.001 - Polycom - Command Shell Grants System-Level Access

2013-03-15 Thread security
n.runs AG http://www.nruns.com/ security(at)nruns.com n.runs-SA-2013.001 15-Mar-2013 ___ Vendor: Polycom, http://www.polycom.com Affected Products: Polycom HDX Series Af