CVE-2001-1005

CVE-2001-1005 affects Starfish Truesync Desktop 2.0b used on the REX 5000 PDA. The underlying issue is weak encryption used to store the user password in a registry key, enabling an attacker with registry access to decrypt the password and gain privileges. NVD lists CVSSv2 base score 7.5 (HIGH) w...

Authentication By-Pass Vulnerability in OpenSSH-2.3.1 (devel snapshot)

Please, check http://www.openssh.com/security.html for a full summary of security related issues in OpenSSH. ---------------------------------------------------------------------------- OpenBSD Security Advisory February 8, 2001 Authentication By-Pass Vulnerability in OpenSSH-2.3.1...

Microsoft Windows SMB Registry : NT4 Service Pack Version Detection

Nessus was able to determine the Service Pack version of the Windows NT system by reading the following registry key : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\CSDVersion C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10401; scriptversion"1.56";...

nt.ras.rras.password.txt

Date: Thu, 27 May 1999 17:18:25 -0400 From: Russ To: [email protected] Subject: Alert: Microsoft Security Bulletin MS99-017 - RAS & RRAS Passwords On March 20th, Dieter Goepferich [email protected] discovered a vulnerability involving both RAS and RRAS. This was...