CVE-2005-3532

authpam.c in courier-authdaemon for Courier Mail Server 0.37.3 through 0.52.1, when using pamtally, does not call the pamacctmgmt function to verify that access should be granted, which allows attackers to authenticate to the server using accounts that have been disabled...

CVE-2005-3532: Undefined Security Weakness

authpam.c in courier-authdaemon for Courier Mail Server 0.37.3 through 0.52.1, when using pamtally, does not call the pamacctmgmt function to verify that access should be granted, which allows attackers to authenticate to the server using accounts that have been disabled...

USN-226-1: Courier vulnerability

Patrick Cheong Shu Yang discovered a flaw in the user account handling of courier-authdaemon. After successful authorization, the Courier mail server granted access to deactivated accounts...

DSA-917-1 courier - programming error

Bulletin has no description...

[DRUPAL-SA-2005-007] Drupal 4.6.4 / 4.5.6 fixes XSS issue

---------------------------------------------------------------------------- Drupal security advisory DRUPAL-SA-2005-007 ---------------------------------------------------------------------------- Advisory ID: DRUPAL-SA-2005-007 Project: Drupal core Date: 2005-11-30 Security risk: less critical...

DRZES Hms 3.2 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/15644/info DRZES HMS is prone to multiple SQL injection vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input before it is used in SQL queries. Successful exploitation could result in a compromise of the application...

CVE-2005-3687

cancelaccount.php in WHM AutoPilot 2.5.30 and earlier allows remote attackers to cancel requests for arbitrary accounts via a modified c parameter...

Successful invasion of the MSSQL database of alternative ideas-vulnerability warning-the black bar safety net

mssql injection of sa use Database and website put in the same server: Method a: Open TS, add accounts on the go, the specific statement is as follows: ;exec master. dbo. xpcmdshell '@echo Components c:\sql' ;exec master. dbo. xpcmdshell '@echo TSEnable = on c:\sql' ;exec master. dbo. xpcmdshell...

Nortel/Bay Networks Default Password (Telnet)

The remote switch/router uses the default password. SPDX-FileCopyrightText: 2002 Rui Bernardino Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Nortel Networks Passwordless Router (Manager Level, Telnet)

The remote Nortel Networks former Bay Networks router has no password for the manager account. SPDX-FileCopyrightText: 2000 Victor Kirhenshtein Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Bay Networks Accelar 1200 Switch Default Credentials (Telnet)

The Bay Networks Accelar 1200 switch has default credentials set. SPDX-FileCopyrightText: 2005 Charles Thier Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MPEi/X Default Accounts

This host has one or more accounts with a blank password. Please see the data section for a list of these accounts. OpenVAS Vulnerability Test $Id: DDIMPEiXFTPAccounts.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: MPEi/X Default Accounts Authors: H D Moore Copyright: Copyright C 2001 H D...

Default password 'debug' for account 'super' (SSH/Telnet)

The account SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.17291";...

MPEi/X Default Accounts (FTP)

This host has one or more accounts with a blank password. SPDX-FileCopyrightText: 2001 HD Moore Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Default password 'ibmdb2' for account 'db2fenc1' (SSH/Telnet)

The account SPDX-FileCopyrightText: 2003 Chris Foster Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.11861";...

Nortel Networks Passwordless Router (User Level, Telnet)

The remote Nortel Networks former Bay Networks router has no password for user account. SPDX-FileCopyrightText: 2000 Victor Kirhenshtein Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Enhydra Multiserver Default Password (HTTP)

This system appears to be running the Enhydra application server configured with the default administrator password of SPDX-FileCopyrightText: 2003 Digital Defense Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Apache UserDir Sensitive Information Disclosure

An information leak occurs on Apache based web servers whenever the UserDir module is enabled. The vulnerability allows an external attacker to enumerate existing accounts by requesting access to their home directory and monitoring the response. OpenVAS Vulnerability Test $Id: apacheusername.nasl...

FlexWATCH Authentication Bypassing

There is a vulnerability in the current version of FlexWATCH that allows an attacker to access administrative sections without being required to authenticate. An attacker may use this flaw to gain the list of user accounts on this system and the ability to reconfigure this service. This is done b...

Psychoblogger SQL Injection

Psychoblogger is prone to an SQL injection vulnerability. SPDX-FileCopyrightText: 2003 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...