9691 matches found
CVE-2000-0435: Undefined Security Weakness
The allmanageup.pl file upload CGI script in the Allmanage Website administration software 2.6 can be called directly by remote attackers, which allows them to modify user accounts or web pages...
CVE-2000-0356: Undefined Security Weakness
Pluggable Authentication Modules PAM in Red Hat Linux 6.1 does not properly lock access to disabled NIS accounts...
CVE-2000-0433
The SuSE aaabase package installs some system accounts with home directories set to /tmp, which allows local users to gain privileges to those accounts by creating standard user startup scripts such as profiles...
CVE-2000-0384
NetStructure 7110 and 7180 have undocumented accounts servnow, root, and wizard whose passwords are easily guessable from the NetStructure's MAC address, which could allow remote attackers to gain root access...
CVE-2000-0433
CVE-2000-0433 affects the SuSE aaa_base package. The description states that it installs some system accounts with home directories set to /tmp, enabling local users to gain privileges by creating standard user startup scripts such as profiles. The CVSSv2 vector (LOCAL, LOW complexity, NONE authe...
CVE-2000-0384: Undefined Security Weakness
NetStructure 7110 and 7180 have undocumented accounts servnow, root, and wizard whose passwords are easily guessable from the NetStructure's MAC address, which could allow remote attackers to gain root access...
Mirabilis ICQ 2000.0 A - Mailclient Temporary Link
Mirabilis ICQ 2000.0 A - Mailclient Temporary Link source: https://www.securityfocus.com/bid/1307/info While using ICQmailclient, the user creates a temporary internet link created in a default temporary directory, which remains even after the user signs out or closes ICQ. This link may be...
CVE-2000-0245
Vulnerability in SGI IRIX objectserver daemon allows remote attackers to create user accounts...
CVE-2000-0245
Technical details about CVE-2000-0245 are not publicly available in the provided documents. Monitor for updates from official advisories.
Sambar Server /sysadmin Default Accounts
The Sambar webserver is running. It provides a web interface for configuration purposes. The admin user has no password and there are some other default users without passwords. Everyone could set the HTTP-Root to c:\ and delete your files! this may be a false positive - go to...
NetStructure 7180 remote backdoor vulnerability
@Stake Inc. L0pht Research Labs www.atstake.com www.L0pht.com Security Advisory Advisory Name: NetStructure 7180 remote backdoor vulnerability Release Date: May 8th, 2000 Application: Intel NetStructure 7180 previously the Ipivot Commerce Accelerator 8000 Severity: Compromise from a remote networ...
CVE-2000-0384
NetStructure 7110 and 7180 have undocumented accounts servnow, root, and wizard whose passwords are easily guessable from the NetStructure's MAC address, which could allow remote attackers to gain root access...
CVE-2000-0300
The CVE refers to PcAnywhere 9.x where the default encryption method is weak, enabling remote attackers to sniff and decrypt PcAnywhere or NT domain accounts. Affected software: PcAnywhere 9.x (default encryption). Root cause: use of weak default encryption in the authentication pathway. Impact: ...
3R Soft MailStudio 2000 2.0 - 'userreg.cgi' Arbitrary Command Execution
// source: https://www.securityfocus.com/bid/1335/info MailStudio 2000 is vulnerable to multiple attacks. It is possible for a remote user to gain read access to all files located on the server via the usage of the "/.." string passed to a CGI, thereby compromising the confidentiality of other...
imapd4r1 v12.264
Newest RH: OK nimue IMAP4rev1 v12.264 server ready 1 login lcamtuf test 1 OK LOGIN completed 1 list "" AAAAAAAAAAAAAAAAAAAAAAAAAAA...yes, a lot of 'A's ; Program received signal SIGSEGV, Segmentation fault. 0x41414141 in ?? sigh Privledges seems to be dropped, but, anyway, it's nice way to get...
SGI Security Advisory
SGI Security Advisory Title: Vulnerability in IRIX 5.3 and 6.2 objectserver Number: 20000303-01-PX Date: March 28, 2000 SGI provides this information freely to the SGI user community for its consideration, interpretation, implementation and use. SGI recommends that this information be acted upon ...
CVE-2000-0245
Vulnerability in SGI IRIX objectserver daemon allows remote attackers to create user accounts...
CVE-2000-0109
The mcsp Client Site Processor system MultiCSP in Standard and Poor's ComStock is installed with several accounts that have no passwords or easily guessable default passwords...
CVE-1999-0197
CVE-1999-0197 corresponds to an information-disclosure in the finger service where querying 0@host may reveal user accounts. The entry is supported by multiple sources: the NVD entry lists a CVSS v2 vector AV:N/AC:L/Au:N/C:C/I:C/A:C with a base score of 10.0 (HIGH), and Red Hat/EUVD/OpenVAS/Nessu...