CVE-2003-0174: Origin Validation Error

The LDAP name service nsd in IRIX 6.5.19 and earlier does not properly verify if the USERPASSWORD attribute has been provided by an LDAP server, which could allow attackers to log in without a password...

CVE-2002-1413

RCONAG6 for Novell Netware SP2, while running RconJ in secure mode, allows remote attackers to bypass authentication using the RconJ "Secure IP" SSL option during a connection...

CVE-2002-0250

The vulnerability concerns HP AdvanceStack hubs (models J3200A–J3210A) running firmware version A.03.07 or earlier. The Web configuration utility exposes a flaw where an unauthorized user can bypass authentication through a direct HTTP request to the web_access.html page. This bypass allows an at...

CVE-2002-0878

SQL injection vulnerability in the login form for LogiSense software including 1 Hawk-i Billing, 2 Hawk-i ASP and 3 DNS Manager allows remote attackers to bypass authentication via SQL code in the password field...

CVE-2002-1069

The remote administration capability for the D-Link DI-804 router 4.68 allows remote attackers to bypass authentication and release DHCP addresses or obtain sensitive information via a direct web request to the pages 1 release.htm, 2 Device Status, or 3 Device Information...

CVE-2002-0769

The web-based configuration interface for the Cisco ATA 186 Analog Telephone Adaptor allows remote attackers to bypass authentication via an HTTP POST request with a single byte, which allows the attackers to 1 obtain the password from the login screen, or 2 reconfigure the adaptor by modifying...

CVE-2001-1252

Network Associates PGP Keyserver 7.0 allows remote attackers to bypass authentication and access the administrative web interface via URLs that directly access cgi-bin instead of keyserver/cgi-bin for the programs 1 console, 2 cs, 3 multiconfig and 4 directory...

CVE-2002-0430

MultiFileUploadHandler.php in the Sun Cobalt RaQ XTR administration interface allows local users to bypass authentication and overwrite arbitrary files via a symlink attack on a temporary file, followed by a request to MultiFileUpload.php...

CVE-2002-0308

admin.asp in AdMentor 2.11 allows remote attackers to bypass authentication and gain privileges via a SQL injection attack on the Login and Password arguments...

HP AdvanceStack Switch - Authentication Bypass

HP AdvanceStack Switch - Authentication Bypass source: https://www.securityfocus.com/bid/4062/info HP AdvanceStack 10Base-T Switching Hubs combine 10Base-T functionality with the performance of switching. It has been reported that authentication for HP J3210A 10Base-T Switching Hubs may be bypass...

CVE-1999-1311

Vulnerability in dtlogin and dtsession in HP-UX 10.20 and 10.10 allows local users to bypass authentication and gain privileges...

CVE-2000-0120

The CVE-2000-0120 entry concerns Allaire Spectra 1.0, where the Remote Access Service invoke.cfm template allows bypassing authentication via the bAuthenticated parameter. This constitutes a vulnerability in the authentication logic of the template, enabling partial disclosure/modification risks ...

CVE-2000-1133

CVE-2000-1133 affects Authentix Authentix100; remote attackers can bypass authentication by inserting a dot (.) into the URL for a protected directory. The connected documents do not specify affected versions, platforms, or a remediation. No exploit code or in-the-wild details are provided.

CVE-1999-0168

The portmapper may act as a proxy and redirect service requests from an attacker, making the request appear to come from the local host, possibly bypassing authentication that would otherwise have taken place. For example, NFS file systems could be mounted through the portmapper despite export...

NetBus 1.x Software Detection

NetBus 1.x is installed. NetBus is a remote administration tool that can be used for malicious purposes, such as sniffing what the user is typing, its passwords and so on. An attacker may have installed it to control hosts on your network. Furthermore, Netbus authentication may be bypassed...

id Software Solaris Quake II 3.133.14 QuakeWorld 2.02.1 Quake 1.93.133.14 - Command Execution

id Software Solaris Quake II 3.133.14 QuakeWorld 2.02.1 Quake 1.93.133.14 - Command Execution // source: https://www.securityfocus.com/bid/90/info The Quake server has a feature where it allows administrators to remotely send commands to the Quake console with a password. However, it is possible ...

CVE-1999-0168

The portmapper may act as a proxy and redirect service requests from an attacker, making the request appear to come from the local host, possibly bypassing authentication that would otherwise have taken place. For example, NFS file systems could be mounted through the portmapper despite export...

PT-1992-1001 · Sun · Sunos

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The portmapper can act as a proxy and redirect service requests from an attacker, making the request appear to come from the local host. This could potentially bypass authentication...