SMC routers unauthorized access

Administration web interface TCP/1900 is available from WAN without authentication...

Unauthorized FTGate access

It's possible to access administration interface without authentication...

CVE-2002-2170

Working Resources Inc. BadBlue Enterprise Edition 1.7 through 1.74 attempts to restrict administrator actions to the IP address of the local host, but does not provide additional authentication, which allows remote attackers to execute arbitrary code via a web page containing an HTTP POST request...

CVE-2002-0570: Undefined Security Weakness

The encrypted loop device in Linux kernel 2.4.10 and earlier does not authenticate the entity that is encrypting data, which allows local users to modify encrypted data without knowing the key...

CVE-2002-0134

Telnet proxy in Avirt Gateway Suite 4.2 does not require authentication for connecting to the proxy system itself, which allows remote attackers to list file contents of the proxy and execute arbitrary commands via a "dos" command...

CVE-2001-1169: Undefined Security Weakness

keyinit in S/Key does not require authentication to initialize a one-time password sequence, which allows an attacker who has gained privileges to a user account to create new one-time passwords for use in other activities that may use S/Key authentication, such as sudo...

CVE-2000-0551

The CVE-2000-0551 entry concerns Danware NetOp 6.0, whose file transfer mechanism reportedly does not require authentication. This allows remote attackers to access and modify arbitrary files, per the description. The connected documents confirm the affected product and the underlying issue (unau...

Two Holes in Sun Cluster 2.x

Hole 1 ------- Summary ------- Sun Cluster 2.x Sun Microsystems' commercial high-availability product for Solaris leaks potentially sensitive information to local or remote users. Specifics --------- In a standard Sun Cluster install, there is a service called clustmon that runs on port 12000. It...

CVE-1999-0791: Undefined Security Weakness

Hybrid Network cable modems do not include an authentication mechanism for administration, allowing remote attackers to compromise the system through the HSMP protocol...

CVE-2000-0757: Undefined Security Weakness

The sysgen service in Aptis Totalbill does not perform authentication, which allows remote attackers to gain root privileges by connecting to the service and specifying the commands to be executed...

CVE-2000-0068

daynad program in Intel InBusiness E-mail Station does not require authentication, which allows remote attackers to modify its configuration, delete files, or read mail...

CVE-2000-0058: Undefined Security Weakness

Network HotSync program in Handspring Visor does not have authentication, which allows remote attackers to retrieve email and files...

CVE-2000-0058

Network HotSync program in Handspring Visor does not have authentication, which allows remote attackers to retrieve email and files...

CVE-2000-0068

daynad program in Intel InBusiness E-mail Station does not require authentication, which allows remote attackers to modify its configuration, delete files, or read mail...

Hybrid Networks Cable Broadband Access System 1.0 - Remote Configuration

Hybrid Networks Cable Broadband Access System 1.0 - Remote Configuration source: https://www.securityfocus.com/bid/695/info Hybrid Network's cable modems are vulnerable to several different types of attack due to a lack of authentication for the remote administration/configuration system. The cab...