9037 matches found
Finger 0@host Unused Account Disclosure
The remote host is running a 'finger' service that suffers from an information disclosure vulnerability. Specifically, it allows an unauthenticated attacker to display a list of accounts on the remote host that have never been used. This list can help an attacker to guess the operating system typ...
PT-1999-1599 · Ipswitch · Ipswitch Imail
Name of the Vulnerable Software and Affected Versions: IPswitch IMail affected versions not specified Description: The issue allows local users to gain additional privileges and modify or add mail accounts by setting the flags registry key to 1920. This enables unauthorized access and control ove...
CVE-1999-0556
Two or more Unix accounts have the same UID...
CVE-1999-0398
In some instances of SSH 1.2.27 and 2.0.11 on Linux systems, SSH will allow users with expired accounts to login...
CVE-1999-0198
finger .@host on some systems may print information on some user accounts...
PT-1999-1084 · Openssh · Ssh
Name of the Vulnerable Software and Affected Versions: SSH versions 1.2.27 and 2.0.11 Description: The issue allows users with expired accounts to login in certain instances of SSH on Linux systems. Recommendations: For SSH version 1.2.27, update to a version that addresses the issue of allowing...
PT-1999-1010 · Finger · Finger
Name of the Vulnerable Software and Affected Versions: finger affected versions not specified Description: The issue allows the 'finger' command to potentially disclose information about user accounts on certain systems when used with specific syntax, such as '0@host'. Recommendations: At the...
CVE-1999-0506
A Windows NT domain user or administrator account has a default, null, blank, or missing password...
CVE-1999-0505
A Windows NT domain user or administrator account has a guessable password...
CVE-1999-0506
A Windows NT domain user or administrator account has a default, null, blank, or missing password...
PT-1998-1091 · Microsoft · Windows Nt
Name of the Vulnerable Software and Affected Versions: Windows NT affected versions not specified Description: The issue concerns a Windows NT domain where a user or administrator account has a password that can be easily guessed. Recommendations: For all affected versions, ensure that strong,...
PT-1998-1092 · Microsoft · Windows Nt
Name of the Vulnerable Software and Affected Versions: Windows NT affected versions not specified Description: The issue concerns Windows NT domain user or administrator accounts that have default, null, blank, or missing passwords. Recommendations: For all affected versions, ensure that strong,...
PT-1998-1068 · Hewlett Packard · Hp-Ux Ssh
Name of the Vulnerable Software and Affected Versions: HP-UX SSH version 1.2.25 Description: The issue allows access to new user accounts on the system. Recommendations: For HP-UX SSH version 1.2.25, update to a newer version that addresses this issue to prevent unauthorized access to new user...
CVE-1999-0013
Stolen credentials from SSH clients via ssh-agent program, allowing other local users to access remote accounts belonging to the ssh-agent user...
PT-1997-1143 · Microsoft · Windows Nt
Name of the Vulnerable Software and Affected Versions: Windows NT affected versions not specified Description: The issue concerns Windows NT local user or administrator accounts that have default, null, blank, or missing passwords. Recommendations: For all affected versions, ensure that all local...
