2021 matches found
CVE-2004-0679
The IP cloaking feature cloak.c in UnrealIRCd 3.2, and possibly other versions, uses a weak hashing scheme to hide IP addresses, which could allow remote attackers to use brute force methods to gain other user's IP addresses...
CVE-2004-0679
CVE-2004-0679 concerns UnrealIRCd 3.2 (and possibly other versions) where the IP cloaking feature (cloak.c) uses a weak hashing scheme to hide IP addresses. This flaw could allow remote attackers to perform brute force attempts to reveal other users’ IP addresses. Multiple connected sources (NVD ...
CVE-2004-0679
The IP cloaking feature cloak.c in UnrealIRCd 3.2, and possibly other versions, uses a weak hashing scheme to hide IP addresses, which could allow remote attackers to use brute force methods to gain other user's IP addresses...
Unreal ircd ip cloacking protection bypass
To hide real IP hash of IP address with simple hashing algorithm is used...
[Full-Disclosure] Unreal ircd 3.2 clocking subsystem vulnerability
Software name: Unreal ircd Vulnerable versions: 3.2 and probably previous versions Problem nature: Information disclosure Summary: Unreal ircd is a popular irc server. One of the features it provides is called 'ip cloaking'. The purpose of this system is to prevent hostile irc users from getting...
jportal.txt
Jportal is a portal system, quite commonly used: Google Results 1 - 10 of about 56,100 for "powered by jportal". 0.22 seconds Homepage: http://jportal2.com/ I've read its code and found: in module/print.inc.php: function artprint .... $query = "SELECT FROM $arttbl WHERE id=$id"; ... What to say? ...
CVE-2003-1480
MySQL 3.20 through 4.1.0 uses a weak algorithm for hashed passwords, which makes it easier for attackers to decrypt the password via brute force methods...
[Full-Disclosure] PrimeBase SQL Database server cleartext password storage.
PrimeBase SQL Database server cleartext password storage. Vapid Labs Security Note 10/20/03 The PrimeBase SQL Database Server 4.2 stores passwords in clear text, and based on the installation users umask settings maybe readable by all local users. From the readme.txt file: "The Admin server will...
CVE-2001-1354
The CVE-2001-1354 entry concerns the NetWin Authentication module (NWAuth) versions 2.0 and 3.0b, as implemented in SurgeFTP and DMail (and possibly other packages). The root cause is weak password hashing used by NWAuth, which could enable local users to decrypt stored passwords or to log in wit...
CVE-2001-1354
NetWin Authentication module NWAuth 2.0 and 3.0b, as implemented in SurgeFTP, DMail, and possibly other packages, uses weak password hashing, which could allow local users to decrypt passwords or use a different password that has the same hash value as the correct password...
CVE-2001-1356
Affected software: NetWin SurgeFTP 2.0f and earlier. Vulnerability: passwords are encrypted with weak hashing, a fixed salt, and modulo 40 arithmetic, enabling remote attackers to perform brute‑force password guessing against the administrator account on port 7021. Impact: attacker could compromi...
SurgeFTP admin account bruteforcable
SurgeFTP admin account bruteforcable AFFECTED SYSTEMS SurgeFTP = 2.0f on a win32 platform, should give the same results on nix DESCRIPTION SurgeFTP uses the same extremely weak hashing algorithm as the NWauth module to store the admin password, but adding a fixed 'salting' value which is "qr"...
CVE-2001-1356
NetWin SurgeFTP 2.0f and earlier encrypts passwords using weak hashing, a fixed salt value and modulo 40 calculations, which allows remote attackers to conduct brute force password guessing attacks against the administrator account on port 7021...
NetWin Authentication Module 3.0b password storage vulnerabilities / buffer overflows
NetWin Authentication Module 3.0b password storage vulnerabilities / buffer overflows AFFECTED SYSTEMS NWAuth module as used by DMail, SurgeFTP, others... cfr www.netwinsite.com I've tested SurgeFTP in particular The source code for NWAuth 2.0 can be found at...
CVE-2001-1354
NetWin Authentication module NWAuth 2.0 and 3.0b, as implemented in SurgeFTP, DMail, and possibly other packages, uses weak password hashing, which could allow local users to decrypt passwords or use a different password that has the same hash value as the correct password...
Проблемы в авторизации MySQL
ИСпользуется слабый механизм хэширования при авторизации позволяющий восстановить пароль...
Уязвимость в Lotus Notes
Алгоритм хэширования паролей пользователя очень слабый - один и тот же пароль всегда дает одинаковый результат, при этом хэши паролей хранятся в файле открытом на чтение, что позволяет атаки по словарю или грубой силы...
PT-2000-1082 · Red Hat · Red Hat
Name of the Vulnerable Software and Affected Versions: Red Hat affected versions not specified Description: The issue is related to the use of DES password encryption with crypt for the initial password in Red Hat installations, instead of using md5 encryption. Recommendations: At the moment, the...
Traceroute Information
Makes a traceroute to the remote host. TRUSTED...
aimprotocol.txt
http://www.rootshell.com/ Author: [email protected] http://www.foo.org/aim/ A quick note: please, do not kick and scream if this is old news; I don't really watch these things and this is the first I've seen. AOL Instant Messenger doesn't seem to make too much a point of security. Security really isn...