Serv-U FTP Server Command Buffer Overflow (CVE-2004-2111)

Serv-U FTP Server is a widely-used FTP server that includes enterprise-grade features such as SSL support, ODBC and Windows NT/SAM user account management, virtual directories, compression etc. By default configuration, Serv-U FTP Server listens on 21/TCP for incoming FTP request. There exists a...

Copy and the real hidden administrator account(complete batch)-bug warning-the black bar safety net

Online to see a lot of copy administator permissions to the account of the method or tool, such as the establishment of the admin$, the so-called hidden account. And copy administrator permissions. In fact, this is a temporary, one-time hidden only, Server reboot through the“Computer Management”o...

Debian Security Advisory DSA 422-1 (cvs)

The remote host is missing an update to cvs announced via advisory DSA 422-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Hidden administrator account the three minutes to get-vulnerability warning-the black bar safety net

On the regedit. exe everyone is familiar with, but not to the registry key set permissions, regedt32. exe the biggest advantages is the ability to the registry key set permissions. nt/2 0 0 0/xp account information in the registry HKEYLOCALMACHINE\SAM\SAM key, but in addition to the system user...

security flaw

login in util-linux-2.12a skips pamacctmgmt and chauthtok when authentication is skipped, such as when a Kerberos krlogin session has been established, which might allow users to bypass intended access policies that would be enforced by pamacctmgmt and chauthtok...

DEBIAN-CVE-2006-7108

login in util-linux-2.12a skips pamacctmgmt and chauthtok when authentication is skipped, such as when a Kerberos krlogin session has been established, which might allow users to bypass intended access policies that would be enforced by pamacctmgmt and chauthtok...

Windows password weakness

Added: 12/19/2005 CVE: CVE-1999-0503 Background Passwords are the most commonly used method of authenticating users to a server. The combination of a login name and password is used to verify the identity of a user requesting access, and to determine what parts of the server the user has permissi...

WHMCompleteSolution XSS vuln.

WHMCompleteSolution XSS vuln. Vuln. dicovered by : r0t Date: 14 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/whmcompletesolution-xss-vuln.html vendor:http://www.whmcs.com/ affected version:2.1 and prior Product Description: WHMCompleteSolution has the features that all web hosts...

Windows Execute net user /ADD

Create a new user and add them to local administration group. Note: The specified password is checked for common complexity requirements to prevent the target machine rejecting the user for failing to meet policy requirements. Complexity check: 8-14 chars 1 UPPER, 1 lower, 1 digit/special This...

Default Password (public) for 'public' Account

The account 'public' on the remote host has the password 'public'. An attacker may use this to gain further privileges on this system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "public"; password = "public"; include'deprecatednasllevel.inc'; include'compat.inc'; if descriptio...

Debian DSA-422-1 : cvs - remote vulnerability

The account management of the CVS pserver which is used to give remote access to CVS repositories uses a CVSROOT/passwd file in each repository which contains the accounts and their authentication information as well as the name of the local unix account to use when a pserver account is used. Sin...

Netegrity IdentityMinder Web Edition 5.6 - Null Byte Cross-Site Scripting

source: https://www.securityfocus.com/bid/10645/info Netegrity IdentityMinder is a tool designed for the Microsoft Windows platform to manage and maintain users and user accounts. The tool supports a web based interface for creating and removing users in multi-user environments. It has been...

Netegrity IdentityMinder Web Edition 5.6 - Management Interface Cross-Site Scripting

Netegrity IdentityMinder Web Edition 5.6 - Management Interface Cross-Site Scripting source: https://www.securityfocus.com/bid/10645/info Netegrity IdentityMinder is a tool designed for the Microsoft Windows platform to manage and maintain users and user accounts. The tool supports a web based...

[SECURITY] [DSA-422-1] multiple CVS improvements

------------------------------------------------------------------------ Debian Security Advisory DSA-422-1 [email protected] http://www.debian.org/security/ Wichert Akkerman January 13, 2004 - ------------------------------------------------------------------------ Package : cvs Vulnerability...

DSA-422 cvs - remote vulnerability

Bulletin has no description...

Unpassworded 'jill' Account

The account 'jill' has no password set. An attacker may use this to gain further privileges on this system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "jill"; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid11266; scriptversion"1.34";...

Unpassworded 'toor' Account

The account 'toor' has no password set. An attacker may use this to gain further privileges on this system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "toor"; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid11252; scriptversion"1.35";...

Microsoft Windows - Local Users Information : Automatically Disabled Accounts

Using the supplied credentials, Nessus was able to list local user accounts that have been automatically disabled. These accounts may have been disabled for security reasons or due to brute-force attack attempts. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10911;...

Microsoft Windows - Users Information : Disabled Accounts

Using the supplied credentials, Nessus was able to list user accounts that have been disabled. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10897; scriptversion"1.19"; scriptcvsdate"Date: 2018/08/13 14:32:39"; scriptnameenglish:"Microsoft Windows - Users Informatio...

Microsoft IIS /iisadmpwd/aexp2.htr Password Policy Bypass

Microsoft IIS installs the 'aexp2.htr', 'aexp2b.htr', 'aexp3.htr', or 'aexp4.htr' files in the '/iisadmpwd' directory by default. These fiels can be used by an attacker to brute-force a valid username/password. A valid user may also use it to change his password on a locked account, bypassing...