CVE-2002-0310

CVE-2002-0310 affects Netwin WebNews 1.1k CGI. The issue arises from default usernames and cleartext passwords that cannot be deleted by the administrator, enabling remote attackers to gain privileges using the listed credential pairs (testweb/newstest, alwn3845/imaptest, alwi3845/wtest3452, test...

CVE-2001-1213

The default configuration of DataWizard FtpXQ 2.0 and 2.1 includes a default username and password, which allows remote attackers to read and write arbitrary files in the root folder...

CVE-2001-1195

CVE-2001-1195 affects Novell GroupWise Servlet Manager (groupwise servlet server) with default credentials. Connected sources confirm that a default username/password (e.g., servlet/manager) enables remote attackers to access the servlet manager and potentially gain privileges. The OpenVAS entrie...

CVE-2001-1213

The CVE-2001-1213 entry applies to DataWizard FtpXQ 2.0 and 2.1, where a default configuration uses a default username and password, enabling remote attackers to read and write arbitrary files in the root folder. Root cause: default credentials in the product’s default setup. Impact per NVD: conf...

Microsoft SQL Server Default Credentials

The SQL Server has a common password for one or more accounts. These accounts may be used to gain access to the records in the database or even allow remote command execution. %NASLMINLEVEL 70300 MSSQL Brute Forcer This script checks a SQL Server instance for common username and password...

Novell Groupwise 5.56.0 Servlet Gateway - Default Authentication

Novell Groupwise 5.56.0 Servlet Gateway - Default Authentication source: https://www.securityfocus.com/bid/3697/info Novell Groupwise Servlet Gateway is a product that allows Java servlets to be run with NetWare, using Novell JVM for NetWare v1.1.7b and NetWare Enterprise Web Server. A remote...

CVE-2001-0632

Sun Chili!Soft 3.5.2 on Linux and 3.6 on AIX creates a default admin username and password in the default installation, which can allow a remote attacker to gain additional privileges...

CVE-2001-0051

IBM DB2 Universal Database version 6.1 creates an account with a default user name and password, which allows remote attackers to gain access to the database...

Sun Java Web Server 1.1.3/2.0 Servlets - information Disclosure

source: https://www.securityfocus.com/bid/1498/info The servlet sunexamples.RealmDumpServlet, which is packaged by Default with Sun's Java Web Server, can be used to discover ACLs and local users on the server. http://javawebserver.com/pservlet.html User: sherwin User: floorsoft User: shaw User:...

Sambar Server 4.1 Beta - Admin Access

Sambar Server 4.1 Beta - Admin Access source: https://www.securityfocus.com/bid/2255/info 'dumpenv.pl' is a utility that will display environment information on which the server resides, this information could include the server software version being used, directory settings and path information...

Sambar Server 4.1 Beta - Admin Access

source: https://www.securityfocus.com/bid/2255/info 'dumpenv.pl' is a utility that will display environment information on which the server resides, this information could include the server software version being used, directory settings and path information. The default authentication credentia...