Title: Rooted SSH/SFTP Daemon Default Login Credentials

Author: Larry W. Cashdollar, @_larry0

Date: 9/2/2014

Download: https://play.google.com/store/apps/details?id=web.oss.sshsftpDaemon

Description: "This app is a SSH terminal server AND an SFTP file server."

Vulnerability: The software comes preconfigured with a default login of 
User: root Password: abc123.  This weak password would easily be guessed
leading to root compromise of the android system.

Fix: Request the user set the password upon installtion.

Vendor: open.software.solutions[4t]gmail.com, Notified 9/3/2014