376 matches found
CVE-2001-0968
Knox Arkeia server 4.2 (and possibly other versions) installs its root user with a null password by default, enabling privilege escalation for local and remote users. The available documents describe the vulnerable condition but do not specify patches or fixes. No explicit exploit details or reme...
CVE-2001-0967
Knox Arkeia server 4.2, and possibly other versions, uses a constant salt when encrypting passwords using the crypt function, which makes it easier for an attacker to conduct brute force password guessing...
CVE-2001-0968
Knox Arkeia server 4.2, and possibly other versions, installs its root user with a null password by default, which allows local and remote users to gain privileges...
CVE-2001-0968: Undefined Security Weakness
Knox Arkeia server 4.2, and possibly other versions, installs its root user with a null password by default, which allows local and remote users to gain privileges...
CVE-2001-0967: Use of Password Hash With Insufficient Computational Effort
Knox Arkeia server 4.2, and possibly other versions, uses a constant salt when encrypting passwords using the crypt function, which makes it easier for an attacker to conduct brute force password guessing...
CVE-1999-1534
CVE-1999-1534 affects Knox Arkeia Backup Server (backup product) with a local buffer overflow in nlservd and rnavc, exploitable via a long HOME environment variable to obtain root privileges. Descriptions across sources consistently indicate local access and root compromise; no concrete remediati...
CVE-1999-1534
Buffer overflow in 1 nlservd and 2 rnavc in Knox Software Arkeia backup product allows local users to obtain root access via a long HOME environmental variable...
CVE-1999-1534: Undefined Security Weakness
Buffer overflow in 1 nlservd and 2 rnavc in Knox Software Arkeia backup product allows local users to obtain root access via a long HOME environmental variable...
CVE-2001-0967
Knox Arkeia server 4.2, and possibly other versions, uses a constant salt when encrypting passwords using the crypt function, which makes it easier for an attacker to conduct brute force password guessing...
CVE-2001-0968
Knox Arkeia server 4.2, and possibly other versions, installs its root user with a null password by default, which allows local and remote users to gain privileges...
PT-2001-2119 · Knox · Knox Arkeia Server
Name of the Vulnerable Software and Affected Versions: Knox Arkeia server version 4.2 Description: The issue is related to the use of a constant salt when encrypting passwords using the crypt function, which makes it easier for an attacker to conduct brute force password guessing. Recommendations...
SuSE_root_exploit.txt
nlservd/rnavc local root exploit for Linux x86 tested on SuSE 6.2 exploits Arkiea's Knox backup package. gcc -o knox knox.c ./knox NOTE: you MUST have void mainsetuidgeteuid; system"/bin/bash"; compiled in /tmp/ui for this to work. To exploit rnavc, simply change the execl call to...
Knox Arkeia Backup Service Buffer Overflow
It was possible to overflow a buffer in the Knox's Arkeia server. This problem allows an attacker to perform a denial of service attack and to gain root using the remote service if the attacker is local. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10018;...
Knox Arkeia 4.0 Backup - Local Overflow
Knox Arkeia 4.0 Backup - Local Overflow / source: https://www.securityfocus.com/bid/661/info Knox Software Arkeia 4.0 Backup rnavc & nlserverd HOME Environment Variable Buffer Overflow A local buffer overflow in the handling of the HOME environment variable by the rlserver and rnavc binaries that...
Knox Arkeia 4.0 Backup - Local Overflow
/ source: https://www.securityfocus.com/bid/661/info Knox Software Arkeia 4.0 Backup rnavc & nlserverd HOME Environment Variable Buffer Overflow A local buffer overflow in the handling of the HOME environment variable by the rlserver and rnavc binaries that are part of the Knox Software Arkiea...