CVE-2007-0932

The (1) Aruba Mobility Controllers 200, 600, 2400, and 6000 and (2) Alcatel-Lucent OmniAccess Wireless 43xx and 6000 do not properly implement authentication and privilege assignment for the guest account, which allows remote attackers to access administrative interfaces or the WLAN.

• CWE-264

• http://lists.grok.org.uk/pipermail/full-disclosure/2007-February/052382.htmlVendor Advisory
• http://osvdb.org/33185
• http://secunia.com/advisories/24144Vendor Advisory
• http://securityreason.com/securityalert/2243
• http://www.kb.cert.org/vuls/id/613833Third Party Advisory, US Government Resource
• http://www.securityfocus.com/archive/1/459927/100/0/threaded
• http://www.securityfocus.com/bid/22538
• https://exchange.xforce.ibmcloud.com/vulnerabilities/32461
• http://lists.grok.org.uk/pipermail/full-disclosure/2007-February/052382.htmlVendor Advisory
• http://osvdb.org/33185
• http://secunia.com/advisories/24144Vendor Advisory
• http://securityreason.com/securityalert/2243
• http://www.kb.cert.org/vuls/id/613833Third Party Advisory, US Government Resource
• http://www.securityfocus.com/archive/1/459927/100/0/threaded
• http://www.securityfocus.com/bid/22538
• https://exchange.xforce.ibmcloud.com/vulnerabilities/32461

Published

Feb 14, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-0926The dologin function in guestbook.php in KvGuestbook 1.0 Bet…
• CVE-2007-0927Heap-based buffer overflow in uTorrent 1.6 allows remote att…
• CVE-2007-0928Virtual Calendar stores sensitive information under the web …
• CVE-2007-0929Directory traversal vulnerability in php rrd browser before …
• CVE-2007-0930Variable extract vulnerability in Apache Stats before 0.0.3b…
• CVE-2007-0931Heap-based buffer overflow in the management interfaces in (…
• CVE-2007-0933Buffer overflow in the wireless driver 6.0.0.18 for D-Link D…
• CVE-2007-0934Unspecified vulnerability in Microsoft Visio 2002 allows rem…
• CVE-2007-0935Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2007-0936Multiple unspecified vulnerabilities in Microsoft Visio 2002…
• CVE-2007-0937Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2007-0938Microsoft Content Management Server (MCMS) 2001 SP1 and 2002…