8930 matches found
Utstarcom backdoor
Builtin priveleged accounts field/field and guru/3nouguru...
UTStarcom B-NAS 1000 / B-RAS 1000 Major Security Flaw
== Overview == UTStarcom http://www.ustar.com is a broadband DSLAM and DSL SMS hardware vendor. Their products are used to manage DSL through PPPoE, PPPoA, bridge mode etc. == Vulnerability == The vendor UTStarcom has placed 2 backdoor accounts with full system access in their BAS-1000 system B-R...
PHP-Nuke v5.6 - Users can compromise admin accts.
Tested on PHP-Nuke v5.6 with Mozilla on Linux should work on past versions and on most browsers Impact: --------------------------------------------- Allows any user to get admin access to a PHP-Nuke site. Summary: ---------------------------------------------- Due to a XSS flaw in PHPNuke's...
MPEi/X Default FTP Accounts
The remote FTP server has one or more accounts with a blank password. This script was written by H D Moore See the Nessus Scripts License for details Changes by Tenable: - Revised plugin title, changed family 11/04/10 include"compat.inc"; ifdescription scriptid11000; scriptversion "1.22";...
Gaim abritary Email Reading
Date: Sun May 12 Problem App: Gaim Messenger Client Problem: Permissions Problem Severity: Low/Medium Results: A local attacker can gain full access to other gaim users hotmail accounts Evidence: See the end of this email for a shell example of this issue Exploitable: Simple if gaim is running,...
popper_mod 1.2.1 and previous accounts compromise
description: poppermod is a free, full featured web based POP3 email client written in PHP. It is an extension of the now abandoned "popper" project. It can be downloaded from http://www.symatec-computer.com/forums/ bug report: poppermod 1.2.1 relied on administrators using htaccess authenticatio...
Microsoft Windows - Local Users Information : Disabled Accounts
Using the supplied credentials, Nessus was able to list local user accounts that have been disabled. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10913; scriptversion"1.19"; scriptcvsdate"Date: 2018/08/13 14:32:39"; scriptnameenglish:"Microsoft Windows - Local User...
Microsoft Windows - Local Users Information : Automatically Disabled Accounts
Using the supplied credentials, Nessus was able to list local user accounts that have been automatically disabled. These accounts may have been disabled for security reasons or due to brute-force attack attempts. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10911;...
Microsoft Windows - Local Users Information : User Has Never Logged In
Using the supplied credentials, Nessus was able to list local users who have never logged into their accounts. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10915; scriptversion"1.19"; scriptcvsdate"Date: 2018/08/13 14:32:39"; scriptnameenglish:"Microsoft Windows -...
Microsoft Windows - Users Information : User Has Never Logged In
Using the supplied credentials, Nessus was able to list users who have never logged into their accounts. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10899; scriptversion"1.20"; scriptcvsdate"Date: 2018/08/13 14:32:39"; scriptnameenglish:"Microsoft Windows - Users...
Microsoft Windows - Users Information : Automatically Disabled Accounts
Using the supplied credentials, Nessus was able to list user accounts that have been automatically disabled. These accounts may have been disabled for security reasons or due to brute-force attack attempts. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10895;...
Microsoft Windows - Users Information : Disabled Accounts
Using the supplied credentials, Nessus was able to list user accounts that have been disabled. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10897; scriptversion"1.19"; scriptcvsdate"Date: 2018/08/13 14:32:39"; scriptnameenglish:"Microsoft Windows - Users Informatio...
Microsoft Windows 'Account Operators' Group User List
Using the supplied credentials, it is possible to extract the member list of the 'Account Operators' group. Members of this group can create or modify local user accounts but can not modify or create administrative accounts or edit user rights. C Tenable Network Security, Inc. include"compat.inc"...
FreeBSD-SA-02:14.pam-pgsql
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-02:14 Security Advisory FreeBSD, Inc. Topic: pam-pgsql port authentication bypass Category: ports Module: pam-pgsql Announced: 2002-03-12 Credits: Jacques A. Vidrine Affects...
Проблемы с блокирвоанными пользователями в Cisco Secure ACS (protection bypass)
Пользователи с блокирвоанными учетными записями NDS могут войти в систему...
Учетные записи miramail в открытом тексте (weak encryption)
Учетные записи пользователей хранятся в открытом тексте...
PT-2001-2573 · Opie · One-Time Passwords In Everything
Name of the Vulnerable Software and Affected Versions: One-Time Passwords In Everything a.k.a OPIE versions 2.32 through 2.4 Description: The issue allows remote attackers to determine the existence of user accounts. This is achieved by the system printing random passphrases if the user account...
Доступ к пользовательским учетным записям в CentraOne (information leakage)
Учетный записи пользователей содержатся в открытом на чтение лог-файле...
MS SQL 7.0 DTS saved packages contain plain text passwords
When creating a Data Transformation Service DTS Package be carefull. The saved file does not encrypt the passwords that the package will use when executed. If a client could convice an admin to create an example DTS package for troubleshooting then the client would have the admin's SQL password. ...
macosxsetuidroot.txt
Dump to text file if you find easier. http://www.securemac.com/macosxsetuidroot.php Operating System: Max OS X Version Affected: up to 10.1 Security Risk: High Remote: No Fixed: No About: Mac OS X over the past few months have started to splout security concerns, this being one of the first most...