Blackboard 5.x Password Retrieval

-- Overview Through the exploitation of a SQL injection vulnerability it is possible for an unauthenticated user to query the Blackboard user directory and: - Enumerate users with a given password. - Extract the MD5 password of any given user. Blackboard Learning System 5.x, level 1 and 2 are...

CVE-2002-1909

Click2Learn Ingenium Learning Management System 5.1 and 6.1 stores the hashed administrative password in a config.txt file under the htdocs directory, which allows remote attackers to obtain the administrative password...

CVE-2002-2316

Cisco Catalyst 4000 series switches running CatOS 5.5.5, 6.3.5, and 7.1.2 do not always learn MAC addresses from a single initial packet, which causes unicast traffic to be broadcast across the switch and allows remote attackers to obtain sensitive network information by sniffing...

Ingenium Admin Password Vulnerability

The vendor was contacted, but I have not received any response other than an autoresponder over the past week... -E Security Advisory -- Click2Learn's Ingenium LMS Brian Enigma [email protected] http://netninja.com/papers/ingenium/ ----------------------- OVERVIEW ----------------------- Produc...

Dangerous information in CentraOne Log files, possible user impersonation

-----BEGIN PGP SIGNED MESSAGE----- Vendor Contacted: 12/7/01 Date Published: 12/17/01 Bugtraq ID: - CVE CAN: - Title: Dangerous information being recorded in CentraOne Log files, possible user impersonation Severity: Medium Remote Exploit: No Local Exploit: Yes Vulnerability Description: Centra i...

Security Update for Learning Essentials 1.0 and 1.1 and 1.5 (KB929437)

Microsoft has released a security update for the Learning Essentials for Microsoft Office tools add-in versions 1.0, 1.1, and 1.5. This update addresses a vulnerability that could allow remote code execution...