242 matches found
Multipl Cisco ACNS (Application and Content Networking System) vulnerabilities
Default administration account, DoS...
Knox Arkeia Network Backup Agent Default Account
The remote host is running Arkeia Network Backup agent, used for backups of the remote host. The remote version of this agent contains a default account that may allow an attacker to gain read/write arbitrary files on the remote system with the privileges of the Arkeia daemon, usually root. C...
BrightStor ARCserve/Enterprise Backup Default Account
Binary data 2622.prm...
CVE-2004-2532
Serv-U FTP server before 5.1.0.0 has a default account and password for local administration, which allows local users to execute arbitrary commands by connecting to the server using the default administrator account, creating a new user, logging in as that new user, and then using the SITE EXEC...
Sambar Default 'billy-bob' Account
Binary data 1575.prm...
Serv-U FTP Server Default Account
Binary data 2115.prm...
MDaemon SMTP Server 5.0.5 - Null Password Authentication
source: https://www.securityfocus.com/bid/8382/info A vulnerability has been reported to affect the MDaemon SMTP authentication handler. It has been reported that any valid username or account can be used in conjunction with a null password, to access the MDaemon SMTP server. This issue may be...
Default Password (lrkr0x) for 'gamez' Account
The account 'gamez' has the password 'lrkr0x'. An attacker may use this to gain further privileges on this system. %NASLMINLEVEL 70300 C Tenable Netowrk Security, Inc. account = "gamez"; password = "lrkr0x"; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid11263;...
Unauthorized access to confixx
Server may be accessed via default account mysqlshell-user...
Beck GmbH IPC@Chip TelnetD service ships with inadequately protected default account
Overview There is a vulnerability in the Beck IPC@CHIP that may allow an attacker to gain access to the device. Description The Beck IPC@CHIP is a single chip embedded webserver. This device also contains a telnet server that ships with an account named "Default". This account essentially grants...
CVE-1999-1355
BMC Patrol component, when installed with Compaq Insight Management Agent 4.23 and earlier, or Management Agents for Servers 4.40 and earlier, creates a PFCUser account with a default password and potentially dangerous privileges...
CVE-2001-0372
Akopia Interchange 4.5.3 through 4.6.3 installs demo stores with a default group account :backup with no password, which allows a remote attacker to gain administrative access via the demo stores 1 barry, 2 basic, or 3 construct...
CVE-2001-0372
Akopia Interchange 4.5.3 through 4.6.3 installs demo stores with a default group account :backup with no password, which allows a remote attacker to gain administrative access via the demo stores 1 barry, 2 basic, or 3 construct...
CVE-2001-0051
CVE-2001-0051 is linked to IBM DB2 UDB 6.1 where a default account/password enables remote access. Connected docs corroborate generic risk through default-db2 credentials (db2as, db2inst1, db2fenc1, etc.) and multiple related CVEs (CVE-1999-0501, CVE-1999-0502, CVE-2001-0051). OpenVAS/Nessus entr...
CVE-2000-0772
The installation of Tumbleweed Messaging Management System MMS 4.6 and earlier formerly Worldtalk Worldsecure creates a default account "sa" with no password...
CVE-2000-0772
The installation of Tumbleweed Messaging Management System MMS 4.6 and earlier formerly Worldtalk Worldsecure creates a default account "sa" with no password...
CVE-2000-0772
The CVE-2000-0772 entry concerns Tumbleweed Messaging Management System (MMS) 4.6 and earlier (formerly Worldtalk Worldsecure) that creates a default account named “sa” with no password, enabling unauthenticated access. The NVD entry attributes a CVSSv2 base score of 7.5 (HIGH) with network attac...
Standard & Poor's ComStock MultiCSP Detection
The remote host seems to be a Standard & Poor's MultiCSP system. Make sure only authorized systems can connect to it. In addition, these units ship with several default accounts with a blank or easily guessed password. However, Nessus has not checked for these. %NASLMINLEVEL 70300 C Tenable Netwo...
CVE-2000-0038
CVE-2000-0038 concerns glFtpD (glftpd) software where a default glftpd user account exists with a default password and a UID of 0. The vulnerability is tied to this account’s privileged UID, enabling potential unauthorized access or privilege elevation. The PT-1999-1846 entry notes affected versi...