NetStructure 7180 remote backdoor vulnerability

@Stake Inc. L0pht Research Labs www.atstake.com www.L0pht.com Security Advisory Advisory Name: NetStructure 7180 remote backdoor vulnerability Release Date: May 8th, 2000 Application: Intel NetStructure 7180 previously the Ipivot Commerce Accelerator 8000 Severity: Compromise from a remote networ...

CVE-2000-0384

NetStructure 7110 and 7180 have undocumented accounts servnow, root, and wizard whose passwords are easily guessable from the NetStructure's MAC address, which could allow remote attackers to gain root access...

CVE-2000-0300

The CVE refers to PcAnywhere 9.x where the default encryption method is weak, enabling remote attackers to sniff and decrypt PcAnywhere or NT domain accounts. Affected software: PcAnywhere 9.x (default encryption). Root cause: use of weak default encryption in the authentication pathway. Impact: ...

3R Soft MailStudio 2000 2.0 - 'userreg.cgi' Arbitrary Command Execution

// source: https://www.securityfocus.com/bid/1335/info MailStudio 2000 is vulnerable to multiple attacks. It is possible for a remote user to gain read access to all files located on the server via the usage of the "/.." string passed to a CGI, thereby compromising the confidentiality of other...

imapd4r1 v12.264

Newest RH: OK nimue IMAP4rev1 v12.264 server ready 1 login lcamtuf test 1 OK LOGIN completed 1 list "" AAAAAAAAAAAAAAAAAAAAAAAAAAA...yes, a lot of 'A's ; Program received signal SIGSEGV, Segmentation fault. 0x41414141 in ?? sigh Privledges seems to be dropped, but, anyway, it's nice way to get...

SGI Security Advisory

SGI Security Advisory Title: Vulnerability in IRIX 5.3 and 6.2 objectserver Number: 20000303-01-PX Date: March 28, 2000 SGI provides this information freely to the SGI user community for its consideration, interpretation, implementation and use. SGI recommends that this information be acted upon ...

CVE-2000-0245

Vulnerability in SGI IRIX objectserver daemon allows remote attackers to create user accounts...

CVE-2000-0109

The mcsp Client Site Processor system MultiCSP in Standard and Poor's ComStock is installed with several accounts that have no passwords or easily guessable default passwords...

CVE-1999-0197

CVE-1999-0197 corresponds to an information-disclosure in the finger service where querying 0@host may reveal user accounts. The entry is supported by multiple sources: the NVD entry lists a CVSS v2 vector AV:N/AC:L/Au:N/C:C/I:C/A:C with a base score of 10.0 (HIGH), and Red Hat/EUVD/OpenVAS/Nessu...

CVE-1999-0398

In some instances of SSH 1.2.27 and 2.0.11 on Linux systems, SSH will allow users with expired accounts to login...

CVE-1999-0556

Two or more Unix accounts have the same UID...

CVE-1999-0504

A Windows NT local user or administrator account has a default, null, blank, or missing password...

CVE-1999-0398

CVE-1999-0398 concerns SSH on Linux, where in some instances of SSH 1.2.27 and 2.0.11, logins from users with expired accounts are allowed. The linked PT Security entry confirms affected versions and recommends upgrading to a fixed version, though no specific patched version is stated. No exploit...

CVE-1999-1497

Ipswitch IMail 5.0 and 6.0 uses weak encryption to store passwords in registry keys, which allows local attackers to read passwords for e-mail accounts...

Ipswitch IMail Server 5.05.0.55.0.65.0.75.0.86.0 - Weak Password Encryption

Ipswitch IMail Server 5.05.0.55.0.65.0.75.0.86.0 - Weak Password Encryption // source: https://www.securityfocus.com/bid/880/info IMail keeps the encrypted passwords for email accounts in a registry key, HKLM\SOFTWARE\Ipswitch\Imail\Domains\DomainName\Users\UserName, in a string value called...

PT-1999-1409 · Slackware · Slackware

Name of the Vulnerable Software and Affected Versions: Slackware version 7.0 Description: The issue allows remote attackers to identify valid users on the system by reporting an encryption error when an account is locked or does not exist. Recommendations: For Slackware version 7.0, update to a...

CVE-1999-0013

Stolen credentials from SSH clients via ssh-agent program, allowing other local users to access remote accounts belonging to the ssh-agent user...

backoffice.installer.txt

Date: Thu, 18 Feb 1999 14:44:48 -0800 PST From: CIAC Mail User To: [email protected] Subject: CIAC Bulletin J-030: Microsoft BackOffice Vulnerability For Public Release -----BEGIN PGP SIGNED MESSAGE----- The U.S. Department of Energy Computer Incident Advisory Capability / | /\ / \ |...

yahoo.news.ticker.txt

FOR IMMEDIATE RELEASE: Application: Yahoo! NEWS TICKER Platforms : Win95,98,NT Advisory: The installation process of the Yahoo! NEWS TICKER leaves a file name "install.log" in the program directory. The file contains plaintext userid and password. The installation process also sets registry entri...

wingate.hijack.txt

Date: Tue, 9 Mar 1999 16:37:49 -0800 To: [email protected] Subject: Hacking USER's email with WinGate, lack of security on some ISPs Found out something to read some emails on my ISP, maybe this will work with other people if the ISP's site works just like mine... It consists that, i...