9737 matches found
Apache Tomcat Default Accounts
This host appears to be the running the Apache Tomcat Servlet engine with the default accounts still configured. A potential intruder could reconfigure this service in a way that grants system access. %NASLMINLEVEL 70300 This script was written by Orlando Padilla See the Nessus Scripts License fo...
CVE-2002-1936
UTStarcom BAS 1000 3.1.10 creates several default or back door accounts and passwords, which allows remote attackers to gain access via 1 field account with a password of "field", 2 guru account with a password of "3noguru", 3 snmp account with a password of "snmp", or 4 dbase account with a...
CVE-2002-1748
Unknown vulnerability in Slash 2.1.x and 2.2 through 2.2.2, as used in Slashcode, allows remote authenticated users to gain access to arbitrary accounts...
CVE-2002-1691
Alcatel OmniPCX 4400 installs known user accounts and passwords in the /etc/password file by default, which allows remote attackers to gain unauthorized access...
PT-2002-2406 · Newsreactor · Newsreactor
Name of the Vulnerable Software and Affected Versions: NewsReactor version 1.0 Description: The issue is related to a weak encryption scheme used by the software, which could allow local users to decrypt passwords and gain access to other users' newsgroup accounts. Recommendations: For NewsReacto...
SPGpartenaires (PHP)
Informations : °°°°°°°°°°°°°° Version : ? - 3.0.1 Website : http://www.scripts-php-gratuits.com Problem : SQL Injection - Access to member's accounts PHP Code/Location : °°°°°°°°°°°°°°°°°°° modif/ident.php : -------------------------------------------------- ... $sql="SELECT nomsite FROM...
MySQL 3.23.x/4.0.x - 'COM_CHANGE_USER' Password Length Account
/ source: https://www.securityfocus.com/bid/6373/info A flaw in the password authentication mechanism for MySQL may make it possible for an authenticated database user to compromise the accounts of other database users. The flaw lies in the fact that the server uses a string returned by the clien...
NOVL-2002-2963767 - Remote Manager Security Issue - eDir 8.6.2
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 For Immediate Disclosure ============================== Summary ============================== Security Alert: NOVL-2002-2963767 Title: Remote Manager Security Issue - eDir 8.6.2 Date: 22-Oct-2002 Revision: Original Product Name: Novell eDirectory 8.6...
CVE-2002-1190
Cisco Unity 2.x and 3.x uses well-known default user accounts, which could allow remote attackers to gain access and place arbitrary calls...
CVE-2002-1229
Avaya Cajun switches P880, P882, P580, and P550R 5.2.14 and earlier contain undocumented accounts 1 manuf and 2 diag with default passwords, which allows remote attackers to gain privileges...
CVE-2002-1229
Avaya Cajun switches P880, P882, P580, and P550R 5.2.14 and earlier contain undocumented accounts 1 manuf and 2 diag with default passwords, which allows remote attackers to gain privileges...
Avaya switches contains multiple undocumented accounts allowing full administrative access to the device
Overview Multiple Avaya switches do not adequately protect privileged access. Description Avaya's P882, P880, P580, and P550R series switches do not adequately protect account access. As a result, a remote attacker can gain access to the switch via http or telnet. --- Impact A remote attacker can...
AVAYA Cajun unauthorized access
Undocumented read/write SNMP community NoGaH$@!. Undocumented accounts diag/danger and manuf/xxyyzz...
CVE-2002-1190
CVE-2002-1190 : Cisco Unity 2.x and 3.x are affected by use of well-known default user accounts, which could allow remote attackers to gain access and place arbitrary calls. The available sources state this description without detailing exact affected versions beyond the 2.x/3.x range or any spec...
CVE-2002-1190
Cisco Unity 2.x and 3.x uses well-known default user accounts, which could allow remote attackers to gain access and place arbitrary calls...
CVE-2002-1190: Undefined Security Weakness
Cisco Unity 2.x and 3.x uses well-known default user accounts, which could allow remote attackers to gain access and place arbitrary calls...
CVE-2002-1092
Cisco VPN 3000 Concentrator 3.6Rel and earlier, and 2.x.x, when configured to use internal authentication with group accounts and without any user accounts, allows remote VPN clients to log in using PPTP or IPSEC user authentication...
ubpbbs.txt
product: Ultimate PHP Board UPB version: Public Beta 1.0b !!FIXED vendor: http://www.webrc.ca/php/upb.php status: notified ------------------------------------------------ summary: upb allow to have two admin' accounts, but witn different access levels. its may aply with spoofing attacks...
UTStarcom B-NAS 1000 / B-RAS 1000 Major Security Flaw
== Overview == UTStarcom http://www.ustar.com is a broadband DSLAM and DSL SMS hardware vendor. Their products are used to manage DSL through PPPoE, PPPoA, bridge mode etc. == Vulnerability == The vendor UTStarcom has placed 2 backdoor accounts with full system access in their BAS-1000 system B-R...