CVE-2004-2048

Published: Dec 31, 2004Modified: Apr 16, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

radmin in eSeSIX Thintune thin clients running firmware 2.4.38 and earlier starts a process port 25072 that can be accessed with a default "jstwo" password, which allows remote attackers to gain access.

Affected (7)

Products: Esesix: Thintune Extreme, Thintune L, Thintune M, Thintune Mobile, Thintune S, Thintune Xm, Thintune Xs

7 products

Thintune Extreme

Thintune Mobile

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Esesix Thintune Extreme	Version 2.4.38
Esesix Thintune L	Version 2.4.38
Esesix Thintune M	Version 2.4.38
Esesix Thintune Mobile	Version 2.4.38
Esesix Thintune S	Version 2.4.38
Esesix Thintune Xm	Version 2.4.38
Esesix Thintune Xs	Version 2.4.38

References (12)

http://marc.info/?l=bugtraq&m=109068491801021&w=2

Source: cve@mitre.org

http://secunia.com/advisories/12154

Source: cve@mitre.org

http://securitytracker.com/id?1010770

Source: cve@mitre.org

http://www.osvdb.org/8246

Source: cve@mitre.org

http://www.securityfocus.com/bid/10794

Source: cve@mitre.org

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/16790

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=109068491801021&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/12154

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1010770

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/8246

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/10794

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/16790

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.