CVE-2016-1356

CVE-2016-1356 affects Cisco FireSIGHT System Software 6.1.0, where credential verification does not use a constant-time algorithm. This timing variability enables remote attackers to enumerate valid usernames via measurement of responses, as described in Cisco’s FireSIGHT advisory (cisco-sa-20160...

curl -- Credentials not checked

The cURL project reports: libcurl will reuse NTLM-authenticated proxy connections without properly making sure that the connection was authenticated with the same credentials as set for this transfer...

CVE-2011-3620

CVE-2011-3620 affects Apache Qpid prior to fixed releases; a flaw in the cluster-join credential verification allows remote attackers who know a valid cluster-username to obtain access to messaging and job functionality. Red Hat advisories (RHSA-2012:0528/0529) state the fix changes to the cluste...

SAP BusinessObjects User Bruteforcer

This module attempts to bruteforce SAP BusinessObjects users. The dswsbobje interface is only used to verify valid credentials for CmcApp. Therefore, any valid credentials that have been identified can be leveraged by logging into CmcApp. This module requires Metasploit:...

CVE-2010-2526

CVE-2010-2526 affects the cluster logical volume manager daemon (clvmd) in LVM2-cluster (LVM2) before 2.02.72 . The issue arises because clvmd does not verify credentials of clients over its control socket, enabling local users to issue crafted commands that can cause the daemon to exit, or to ac...

openSUSE 10 Security Update : open-iscsi (open-iscsi-4034)

This update fixes insecure privileges and credential verification with the iscsi daemon. CVE-2007-3099, CVE-2007-3100 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update open-iscsi-4034. The text...

CVE-2006-2773

admin/redigera/redigera2.asp in Hogstorps hogstorp Guestbook 2.0 does not verify user credentials, which allows remote attackers to edit arbitrary posts via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-2773

CVE-2006-2773 affects Hogstorps hogstorp Guestbook 2.0 (admin/redigera/redigera2.asp). The vulnerability is that this page does not verify user credentials, allowing remote attackers to edit arbitrary posts via unspecified vectors. The NVD entry assigns a CVSSv2 base score of 6.4 (MEDIUM) with ne...

PHP Arena paFileDB 1.1.32.1.13.03.1 - Arbitrary File Upload Execution

PHP Arena paFileDB 1.1.32.1.13.03.1 - Arbitrary File Upload Execution source: https://www.securityfocus.com/bid/8271/info It has been reported that a script contained in paFileDB does not properly verify user credentials before accepting files for upload. As a result, remote attackers may be able...