CVE-2001-0001

cookiedecode function in PHP-Nuke 4.4 allows users to bypass authentication and gain access to other user accounts by extracting the authentication information from a cookie...

CVE-2001-1338

Beck IPC GmbH IPC@CHIP TelnetD server generates different responses when given valid and invalid login names, which allows remote attackers to determine accounts on the system...

Solaris 2.67.0 - IN.FTPD CWD Username Enumeration

Solaris 2.67.0 - IN.FTPD CWD Username Enumeration source: https://www.securityfocus.com/bid/2564/info Solaris is the variant of the UNIX Operating System distributed by Sun Microsystems. Solaris is a versatile operating system designed for use with machines as small as desktop systems and as larg...

Akopia Interchange E-commerce Package Demo Files Vulnerability

A serious security vulnerability has been found in the default installation of the Interchange demo stores 'barry', 'basic', and 'construct' distributed in Interchange versions 4.5.3 through 4.6.3. Using a group login that had no password set by default, it is possible to log in to the back-end...

IBM NetCommerce Security

hola friends, while i was participating on the openhack contest i found a couple of serious security-holes within ibm s so called "netcommerce" thing which seems to be a mixture of websphere, net.data, servlets, jsp s and db2? however..summary: class: input validation error remote: yes local: yes...

CVE-2000-1017

Webteachers Webdata allows remote attackers with valid Webdata accounts to read arbitrary files by posting a request to import the file into the WebData database...

Voyant Technologies Sonata conferencing vulnerabilties.

Please Release Vulnerability Report For Voyant Technologies Sonata Conferencing product. Larry W. Cashdollar Vapid Labs Date Published: 11/07/2000 Advisory ID: 10132000-01 CVE CAN: None currently assigned. Title: Multiple Vulnerabilities found in Sonata teleconferencing Application. Class: Design...

CVE-2000-0696

The CVE-2000-0696 entry concerns the dwhttpd web server’s administration interface in Solaris AnswerBook2 . The vulnerability arises because the admin interface does not properly authenticate requests to its supporting CGI scripts, enabling a remote attacker to add user accounts by directly invok...

cpmdaemon.txt

/ ---------------------------------- cpmdaemon password changer script ---------------------------------- This is a s0d advisory ... Wellcome to our world. You can find this advisory on www.s0d.org on the advisories section. Author: + Enrique Alfonso Sanchez Montellano El Nahual Shouts: + 0x90,...

MySQL Unpassworded Account Check

It is possible to connect to the remote MySQL database server using an unpassworded account. This may allow an attacker to launch further attacks against the database. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10481; scriptversion"1.62"; scriptcvsdate"Date:...

PostgreSQL Default Unpassworded Account

It is possible to connect to the remote PostgreSQL database server using an unpassworded account. This may allow an attacker to launch further attacks against the database. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

University of Washington pop2d 4.46/4.51/4.54/4.55 - Remote File Read

source: https://www.securityfocus.com/bid/1484/info A vulnerability exists in versions of the ipop2d daemon, through version 4.55. ipop2d is part of the University of Washington imap package. Versions through 4.7c of the imap package are affected. Any user who has a pop account on the machine can...

CVE-2000-0356

Pluggable Authentication Modules PAM in Red Hat Linux 6.1 does not properly lock access to disabled NIS accounts...

CVE-2000-0433

The SuSE aaabase package installs some system accounts with home directories set to /tmp, which allows local users to gain privileges to those accounts by creating standard user startup scripts such as profiles...

CVE-2000-0384

NetStructure 7110 and 7180 have undocumented accounts servnow, root, and wizard whose passwords are easily guessable from the NetStructure's MAC address, which could allow remote attackers to gain root access...

CVE-2000-0433

CVE-2000-0433 affects the SuSE aaa_base package. The description states that it installs some system accounts with home directories set to /tmp, enabling local users to gain privileges by creating standard user startup scripts such as profiles. The CVSSv2 vector (LOCAL, LOW complexity, NONE authe...

Mirabilis ICQ 2000.0 A - Mailclient Temporary Link

Mirabilis ICQ 2000.0 A - Mailclient Temporary Link source: https://www.securityfocus.com/bid/1307/info While using ICQmailclient, the user creates a temporary internet link created in a default temporary directory, which remains even after the user signs out or closes ICQ. This link may be...

CVE-2000-0245

Vulnerability in SGI IRIX objectserver daemon allows remote attackers to create user accounts...

CVE-2000-0245

Technical details about CVE-2000-0245 are not publicly available in the provided documents. Monitor for updates from official advisories.

Sambar Server /sysadmin Default Accounts

The Sambar webserver is running. It provides a web interface for configuration purposes. The admin user has no password and there are some other default users without passwords. Everyone could set the HTTP-Root to c:\ and delete your files! this may be a false positive - go to...