3Com SuperStack II RAS 1500 Unauthorized Access Vulnerability

Exploit Datenbank (exploit-db.com)
CVE Datenbank (cve.mitre.org)
OSVDB Datenbank (osvdb.org)
Mark Joseph Edwards 24.03.2003 Verified
Remote Exploits Hardware

Exploit Code

Code Download 
source: http://www.securityfocus.com/bid/7176/info

A vulnerability has been reported in 3Com RAS 1500 router that may allow attackers to access sensitive data. Specifically, RAS 1500 devices fail to carry out authentication when requests are made for various files that may contain sensitive information.

GET /user_settings.cfg HTTP/1.0