Description
radmin in eSeSIX Thintune thin clients running firmware 2.4.38 and earlier starts a process port 25072 that can be accessed with a default "jstwo" password, which allows remote attackers to gain access.
References
- thintune-password-gain-access(16790) vdb-entry
- 10794 vdb-entry
- 12154 third-party-advisory
- 1010770 vdb-entry
- 20040724 eSeSIX Thintune thin client multiple vulnerabilities mailing-list
- 8246 vdb-entry