Mirabilis ICQ 2000.0 A - Mailclient Temporary Link

Mirabilis ICQ 2000.0 A - Mailclient Temporary Link source: https://www.securityfocus.com/bid/1307/info While using ICQmailclient, the user creates a temporary internet link created in a default temporary directory, which remains even after the user signs out or closes ICQ. This link may be...

CVE-2000-0245

Vulnerability in SGI IRIX objectserver daemon allows remote attackers to create user accounts...

CVE-2000-0245

Technical details about CVE-2000-0245 are not publicly available in the provided documents. Monitor for updates from official advisories.

Sambar Server /sysadmin Default Accounts

The Sambar webserver is running. It provides a web interface for configuration purposes. The admin user has no password and there are some other default users without passwords. Everyone could set the HTTP-Root to c:\ and delete your files! this may be a false positive - go to...

NetStructure 7180 remote backdoor vulnerability

@Stake Inc. L0pht Research Labs www.atstake.com www.L0pht.com Security Advisory Advisory Name: NetStructure 7180 remote backdoor vulnerability Release Date: May 8th, 2000 Application: Intel NetStructure 7180 previously the Ipivot Commerce Accelerator 8000 Severity: Compromise from a remote networ...

CVE-2000-0384

NetStructure 7110 and 7180 have undocumented accounts servnow, root, and wizard whose passwords are easily guessable from the NetStructure's MAC address, which could allow remote attackers to gain root access...

CVE-2000-0300

The CVE refers to PcAnywhere 9.x where the default encryption method is weak, enabling remote attackers to sniff and decrypt PcAnywhere or NT domain accounts. Affected software: PcAnywhere 9.x (default encryption). Root cause: use of weak default encryption in the authentication pathway. Impact: ...

3R Soft MailStudio 2000 2.0 - 'userreg.cgi' Arbitrary Command Execution

// source: https://www.securityfocus.com/bid/1335/info MailStudio 2000 is vulnerable to multiple attacks. It is possible for a remote user to gain read access to all files located on the server via the usage of the "/.." string passed to a CGI, thereby compromising the confidentiality of other...

imapd4r1 v12.264

Newest RH: OK nimue IMAP4rev1 v12.264 server ready 1 login lcamtuf test 1 OK LOGIN completed 1 list "" AAAAAAAAAAAAAAAAAAAAAAAAAAA...yes, a lot of 'A's ; Program received signal SIGSEGV, Segmentation fault. 0x41414141 in ?? sigh Privledges seems to be dropped, but, anyway, it's nice way to get...

SGI Security Advisory

SGI Security Advisory Title: Vulnerability in IRIX 5.3 and 6.2 objectserver Number: 20000303-01-PX Date: March 28, 2000 SGI provides this information freely to the SGI user community for its consideration, interpretation, implementation and use. SGI recommends that this information be acted upon ...

CVE-2000-0245

Vulnerability in SGI IRIX objectserver daemon allows remote attackers to create user accounts...

CVE-2000-0109

The mcsp Client Site Processor system MultiCSP in Standard and Poor's ComStock is installed with several accounts that have no passwords or easily guessable default passwords...

CVE-1999-0197

CVE-1999-0197 corresponds to an information-disclosure in the finger service where querying 0@host may reveal user accounts. The entry is supported by multiple sources: the NVD entry lists a CVSS v2 vector AV:N/AC:L/Au:N/C:C/I:C/A:C with a base score of 10.0 (HIGH), and Red Hat/EUVD/OpenVAS/Nessu...

CVE-1999-0398

In some instances of SSH 1.2.27 and 2.0.11 on Linux systems, SSH will allow users with expired accounts to login...

CVE-1999-0556

Two or more Unix accounts have the same UID...

CVE-1999-0504

A Windows NT local user or administrator account has a default, null, blank, or missing password...

CVE-1999-0398

CVE-1999-0398 concerns SSH on Linux, where in some instances of SSH 1.2.27 and 2.0.11, logins from users with expired accounts are allowed. The linked PT Security entry confirms affected versions and recommends upgrading to a fixed version, though no specific patched version is stated. No exploit...

CVE-1999-1497

Ipswitch IMail 5.0 and 6.0 uses weak encryption to store passwords in registry keys, which allows local attackers to read passwords for e-mail accounts...

Ipswitch IMail Server 5.05.0.55.0.65.0.75.0.86.0 - Weak Password Encryption

Ipswitch IMail Server 5.05.0.55.0.65.0.75.0.86.0 - Weak Password Encryption // source: https://www.securityfocus.com/bid/880/info IMail keeps the encrypted passwords for email accounts in a registry key, HKLM\SOFTWARE\Ipswitch\Imail\Domains\DomainName\Users\UserName, in a string value called...

PT-1999-1409 · Slackware · Slackware

Name of the Vulnerable Software and Affected Versions: Slackware version 7.0 Description: The issue allows remote attackers to identify valid users on the system by reporting an encryption error when an account is locked or does not exist. Recommendations: For Slackware version 7.0, update to a...