9260 matches found
wingate.hijack.txt
Date: Tue, 9 Mar 1999 16:37:49 -0800 To: [email protected] Subject: Hacking USER's email with WinGate, lack of security on some ISPs Found out something to read some emails on my ISP, maybe this will work with other people if the ISP's site works just like mine... It consists that, i...
yahoo.news.ticker.txt
FOR IMMEDIATE RELEASE: Application: Yahoo! NEWS TICKER Platforms : Win95,98,NT Advisory: The installation process of the Yahoo! NEWS TICKER leaves a file name "install.log" in the program directory. The file contains plaintext userid and password. The installation process also sets registry entri...
Finger 0@host Unused Account Disclosure
The remote host is running a 'finger' service that suffers from an information disclosure vulnerability. Specifically, it allows an unauthenticated attacker to display a list of accounts on the remote host that have never been used. This list can help an attacker to guess the operating system typ...
PT-1999-1599 · Ipswitch · Ipswitch Imail
Name of the Vulnerable Software and Affected Versions: IPswitch IMail affected versions not specified Description: The issue allows local users to gain additional privileges and modify or add mail accounts by setting the flags registry key to 1920. This enables unauthorized access and control ove...
CVE-1999-0556
Two or more Unix accounts have the same UID...
CVE-1999-0398
In some instances of SSH 1.2.27 and 2.0.11 on Linux systems, SSH will allow users with expired accounts to login...
CVE-1999-0198
finger .@host on some systems may print information on some user accounts...
PT-1999-1010 · Finger · Finger
Name of the Vulnerable Software and Affected Versions: finger affected versions not specified Description: The issue allows the 'finger' command to potentially disclose information about user accounts on certain systems when used with specific syntax, such as '0@host'. Recommendations: At the...
PT-1999-1084 · Openssh · Ssh
Name of the Vulnerable Software and Affected Versions: SSH versions 1.2.27 and 2.0.11 Description: The issue allows users with expired accounts to login in certain instances of SSH on Linux systems. Recommendations: For SSH version 1.2.27, update to a version that addresses the issue of allowing...
CVE-1999-0506
A Windows NT domain user or administrator account has a default, null, blank, or missing password...
CVE-1999-0505
A Windows NT domain user or administrator account has a guessable password...
CVE-1999-0506
A Windows NT domain user or administrator account has a default, null, blank, or missing password...
PT-1998-1091 · Microsoft · Windows Nt
Name of the Vulnerable Software and Affected Versions: Windows NT affected versions not specified Description: The issue concerns a Windows NT domain where a user or administrator account has a password that can be easily guessed. Recommendations: For all affected versions, ensure that strong,...
PT-1998-1092 · Microsoft · Windows Nt
Name of the Vulnerable Software and Affected Versions: Windows NT affected versions not specified Description: The issue concerns Windows NT domain user or administrator accounts that have default, null, blank, or missing passwords. Recommendations: For all affected versions, ensure that strong,...
PT-1998-1068 · Hewlett Packard · Hp-Ux Ssh
Name of the Vulnerable Software and Affected Versions: HP-UX SSH version 1.2.25 Description: The issue allows access to new user accounts on the system. Recommendations: For HP-UX SSH version 1.2.25, update to a newer version that addresses this issue to prevent unauthorized access to new user...
CVE-1999-0013
Stolen credentials from SSH clients via ssh-agent program, allowing other local users to access remote accounts belonging to the ssh-agent user...
PT-1997-1143 · Microsoft · Windows Nt
Name of the Vulnerable Software and Affected Versions: Windows NT affected versions not specified Description: The issue concerns Windows NT local user or administrator accounts that have default, null, blank, or missing passwords. Recommendations: For all affected versions, ensure that all local...
CVE-2026-65140
Fix a privilege escalation where an operator could alter Administrator accounts through the accounting database...
