newsbot
02-10-2007, 09:21 PM
A bug in the Promise NAS NS4300N web GUI allows an authenticated (admin) user to change the password of the 'root' account.
http://www.securiteam.com/unixfocus/6F0030KK0O.html
http://www.securiteam.com/unixfocus/6F0030KK0O.html