Apache UserDir Sensitive Information Disclosure

An information leak occurs on Apache based web servers whenever the UserDir module is enabled. The vulnerability allows an external attacker to enumerate existing accounts by requesting access to their home directory and monitoring the response. OpenVAS Vulnerability Test $Id: apacheusername.nasl...

MPEi/X Default Accounts

This host has one or more accounts with a blank password. Please see the data section for a list of these accounts. OpenVAS Vulnerability Test $Id: DDIMPEiXFTPAccounts.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: MPEi/X Default Accounts Authors: H D Moore Copyright: Copyright C 2001 H D...

FlexWATCH Authentication Bypassing

There is a vulnerability in the current version of FlexWATCH that allows an attacker to access administrative sections without being required to authenticate. An attacker may use this flaw to gain the list of user accounts on this system and the ability to reconfigure this service. This is done b...

Nortel/Bay Networks Default Password (Telnet)

The remote switch/router uses the default password. SPDX-FileCopyrightText: 2002 Rui Bernardino Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Nortel Networks Passwordless Router (User Level, Telnet)

The remote Nortel Networks former Bay Networks router has no password for user account. SPDX-FileCopyrightText: 2000 Victor Kirhenshtein Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Nortel/Bay Networks/Xylogics Annex Default Password (Telnet)

The remote terminal server has the default password set. SPDX-FileCopyrightText: 2003 Douglas Minderhout Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Unpassworded 'bash' account

The account SPDX-FileCopyrightText: 2004 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.15583";...

MPEi/X Default Accounts (FTP)

This host has one or more accounts with a blank password. SPDX-FileCopyrightText: 2001 HD Moore Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Default password 'ibmdb2' for account 'db2fenc1' (SSH/Telnet)

The account SPDX-FileCopyrightText: 2003 Chris Foster Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.11861";...

Default password 'public' for account 'public' (SSH/Telnet)

The account SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.17290";...

Enhydra Multiserver Default Password (HTTP)

This system appears to be running the Enhydra application server configured with the default administrator password of SPDX-FileCopyrightText: 2003 Digital Defense Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Nortel Networks Passwordless Router (Manager Level, Telnet)

The remote Nortel Networks former Bay Networks router has no password for the manager account. SPDX-FileCopyrightText: 2000 Victor Kirhenshtein Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Psychoblogger SQL Injection

Psychoblogger is prone to an SQL injection vulnerability. SPDX-FileCopyrightText: 2003 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Bay Networks Accelar 1200 Switch Default Credentials (Telnet)

The Bay Networks Accelar 1200 switch has default credentials set. SPDX-FileCopyrightText: 2005 Charles Thier Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Shiva LanRover Blank Password (Telnet)

The Shiva LanRover has no password set for the root user account. SPDX-FileCopyrightText: 2005 Digital Defense Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Default password 'debug' for account 'super' (SSH/Telnet)

The account SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.17291";...

[Full-disclosure] HYSA-2005-009 Elite Forum 1.0.0.0 XSS Vulnerability

------------------------------------------------------ HYSA-2005-009 h4cky0u.org Advisory 009 ------------------------------------------------------ Date - Tue Nov 1 2005 TITLE: ====== Elite Forum 1.0.0.0 XSS Vulnerability SEVERITY: ========= Medium SOFTWARE: ========= Elite Forum 1.0.0.0 INFO:...

CVE-2005-3316

The installation of ON Symantec Discovery 4.5.x and Symantec Discovery 6.0 creates the 1 DiscoveryWeb and 2 DiscoveryRO database accounts with null passwords, which could allow attackers to gain privileges or prevent Discovery from running by setting another password...

[SA17302] Symantec Discovery Database Accounts Null Password

TITLE: Symantec Discovery Database Accounts Null Password SECUNIA ADVISORY ID: SA17302 VERIFY ADVISORY: http://secunia.com/advisories/17302/ CRITICAL: Moderately critical IMPACT: Manipulation of data, Exposure of sensitive information WHERE: From local network SOFTWARE: Symantec Discovery 6.x...

Symantec Discovery Web Accounts Null Password

SUMMARY Risk Impact Medium Remote Access | Yes ---|--- Local Access | Yes Authentication Required | No Exploit publicly available | NA AFFECTED PRODUCTS Product | Version | Solution ---|---|--- ON Command Discovery Standard Edition | 4.5.x | Downloadable Updates ON Command Discovery Web Edition |...