The ACC router shows configuration without authentication

The remote router is an ACC router. Some software versions on this router will allow an attacker to run the SHOW command without first providing any authentication to see part of the router SPDX-FileCopyrightText: 2000 Sebastian Andersson Some text descriptions might be excerpted from a reference...

Default password 'synnet' for account 'debug' (SSH/Telnet)

The account SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.17289";...

Unpassworded 'bash' account

The account SPDX-FileCopyrightText: 2004 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.15583";...

CVE-1999-1586

CVE-1999-1586 describes a local privilege-escalation in SunOS 4.1.x where the loader path loadmodule , used by xnews, does not properly sanitize its environment. The underlying issue is inadequate environment handling, allowing local users to gain privileges. Affected product/component: SunOS 4.1...

CVE-1999-1585

The CVE-1999-1585 entry concerns Sun Solaris 2.x (possibly before 2.4) where the rcS and mountall programs start a privileged shell on the system console if fsck fails during boot. This local vulnerability could let attackers with physical access gain root privileges. The root cause is the boot-t...

CVE-1999-1584

CVE-1999-1584 affects SunOS 4.1.1–4.1.3c (and Open Windows 3.0) where two components, loadmodule and modload (when modload runs with setuid/setgid privileges), improperly handle environment variables. This allows local users to gain root privileges. The underlying cause is improper environment sa...

CVE-1999-1585

The 1 rcS and 2 mountall programs in Sun Solaris 2.x, possibly before 2.4, start a privileged shell on the system console if fsck fails while the system is booting, which allows attackers with physical access to gain root privileges...

CVE-2002-1999

The CVE-2002-1999 entry describes a vulnerability in HP Praesidium Webproxy 1.0 running on HP-UX 11.04 VVOS where remote attackers can cause the Webproxy to forward requests to the internal network by sending crafted HTTP requests. Affected product: HP Praesidium Webproxy 1.0 on HP-UX 11.04 VVOS....

[VulnWatch] Blank Administrator password in DELL XP Professional install

Vulnerability in DELL Windows XP Professional - default hidden Administrator account allows local Administrator access Systems: DELLtm Laptops with Windowstm; Professional Vulnerable: DELL Laptops with pre installed Microsoft Windows XP Professional SP2 Not Vulnerable: DELL Laptops with Retail...

CVE-2005-1999

CVE-2005-1999 corresponds to multiple XSS vulnerabilities in paFileDB 3.1 (paFileDB 3.1) where an attacker can inject arbitrary script or HTML via the sortby, filelist (category.php) or pages (viewall.php) parameters. The affected component is pafiledb.php; root cause is improper sanitization of ...

RHEL 2.1 : squid (RHSA-2005:489)

An updated squid package that fixes several security issues is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. Squid is a full-featured Web proxy cache. A bug was found in the way Squid handles PUT and POST requests. It is possible fo...

CVE-2004-1999

CVE-2004-1999 describes a Cross-site scripting (XSS) vulnerability in the Downloads module of Php-Nuke 6.x through 7.2. The issue allows remote attackers to inject arbitrary HTML and web script via the ttitle or sid parameters to modules.php. Affected software is Php-Nuke, version range 6.x–7.2, ...

CVE-1999-1580

CVE-1999-1580 affects SunOS sendmail 5.59–5.65. The bug arises from using popen to process a forwarding host argument, enabling local users to gain root privileges by manipulating the IFS variable and passing crafted values to the -oR option. This creates a local privilege escalation vector. Publ...

CVE-1999-1574

CVE-1999-1574 concerns a buffer overflow in the lex routines of nslookup on AIX 4.3, which can cause a core dump and potentially allow arbitrary code execution via long input strings. Affected component: nslookup (AIX 4.3). Exploitation details are not explicitly described in the provided documen...

CVE-1999-1577

CVE-1999-1577 describes a buffer overflow in the HHOpen ActiveX control (hhopen.ocx) version 1.0.0.1 used with Internet Explorer 4.01/5. The vulnerability allows remote attackers to execute arbitrary commands by passing long arguments to the OpenHelp method. The available sources confirm the vuln...

CVE-1999-1573

CVE-1999-1573 covers multiple unknown vulnerabilities in HP-UX 10.00–11.00 r-commands (rshd, rexecd, rlogind, rlogin, remsh, rcp, rexec, rdist). The description indicates attackers could gain privileges or access files via these remote commands, but no concrete root-cause, affected versions beyon...

CVE-1999-1578

CVE-1999-1578 involves a buffer overflow in the Registration Wizard ActiveX control (regwizc.dll, InvokeRegWizard) version 3.0.0.0, used by Internet Explorer 4.01 and 5. The root cause is a buffer overflow in the ActiveX control, which allows remote attackers to execute arbitrary commands. The vu...

CVE-1999-1583

CVE-1999-1583: Buffer overflow in nslookup for AIX 4.3 allows local users to execute arbitrary code via a long hostname command line argument. Affected: nslookup on AIX 4.3. Root cause: buffer overflow when processing the hostname argument. Impact: local arbitrary code execution (per CVSSv2 vecto...

CVE-1999-1579

CVE-1999-1579 affects the Cenroll ActiveX control (xenroll.dll) used in Terminal Server Editions of Windows NT 4.0 and Windows NT Server 4.0 prior to SP6. The vulnerability enables remote attackers to cause a denial of service via resource consumption by creating a large number of arbitrary files...

CVE-1999-1581

The CVE-1999-1581 issue affects the SNMP agent (snmp.exe) on Windows NT 4.0 prior to Service Pack 4. The vulnerability is a memory leak triggered by a high volume of SNMP packets containing undecodable OIDs, leading to denial of service via memory exhaustion. The provided sources describe the aff...