1393 matches found
Usermin: Multiple vulnerabilities
Background Usermin is a web-based administration tool for Unix. It supports a wide range of user applications including configuring mail forwarding, setting up SSH or reading mail. Description Usermin contains two security vulnerabilities. One fails to properly sanitize email messages that contai...
[SNS Advisory No.75] Webmin/Usermin Account Lockout Bypass Vulnerability
---------------------------------------------------------------------- SNS Advisory No.75 Webmin/Usermin Account Lockout Bypass Vulnerability Problem first discovered on: Sun, 11 Apr 2004 Published on: Fri, 11 Jun 2004 ---------------------------------------------------------------------- Overvie...
Webmin: Multiple vulnerabilities
Background Webmin is a web-based administration tool for Unix. It supports a wide range of applications including Apache, DNS, file sharing and others. Description Webmin contains two security vulnerabilities. One allows any user to view the configuration of any module and the other could allow a...
CVE-2002-0453
The account lockout capability in Oblix NetPoint 5.2 and earlier only locks out users once for the specified lockout period, which makes it easier for remote attackers to conduct brute force password guessing by waiting until the lockout period ends, then guessing passwords without being locked o...
CVE-2002-0453
The account lockout capability in Oblix NetPoint 5.2 and earlier only locks out users once for the specified lockout period, which makes it easier for remote attackers to conduct brute force password guessing by waiting until the lockout period ends, then guessing passwords without being locked o...
CVE-2002-0453
CVE-2002-0453 affects Oblix NetPoint 5.2 and earlier. The vulnerability is in the account lockout mechanism, which only locks out a user once for the specified period. This allows remote attackers to repeat brute-force password guessing by waiting for the lockout window to reset and attempting pa...
CVE-2001-1340
Beck GmbH IPC@Chip TelnetD service supports only one connection and does not disconnect a user who does not complete the login process, which allows remote attackers to lock out the administrator account by connecting to the service...
CVE-2001-1340
Beck GmbH IPC@Chip TelnetD service is affected. The TelnetD accepts only a single connection and does not disconnect a user who does not complete login, enabling an attacker to lock out the administrator by remaining idle at a login prompt. This vulnerability stems from a missing login timeout an...
Account Lockout Vulnerability in Oblix NetPoint v5.2
Name: Oblix NetPoint 5.2 Account Lockout Bug Vendor: Oblix Homepage: http://www.oblix.com/products/netpoint/inde x.html Versions: Confirmed on v5.2, probable on earlier versions Severity: Medium to High Risk Description: "Oblix NetPoint creates a unified e-business infrastructure by providing an...
CVE-2001-1570
Windows XP with fast user switching and account lockout enabled allows local users to deny user account access by setting the fast user switch to the same user self multiple times, which causes other accounts to be locked out...
Beck IPC@Chip TelnetD vulnerable to account lockout via idle telnet connection
Overview There is a vulnerability in the Beck IPC@CHIP that allows an attacker to create a denial-of-service condition. Description The Beck IPC@CHIP is a single chip embedded webserver. This device contains a telnet server that is configured by default to not have a login timeout. Additionally,...
ZyXEL Router Default Telnet Password Present
The remote host is a ZyXEL router with a default password. An attacker could telnet to it and reconfigure it to lock the owner out and prevent him from using his Internet connection, or create a dial-in user to connect directly to the LAN attached to it. This script was written by Giovanni Fiasch...
CVE-2001-0157
Debugging utility in the backdoor mode of Palm OS 3.5.2 and earlier allows attackers with physical access to a Palm device to bypass access restrictions and obtain passwords, even if the system lockout mechanism is enabled...
Microsoft Windows 2000 Workstation in mixed-mode domain may ignore domain account lockout restriction due to flaw in NTLM authentication
Overview A flaw in certain configurations of Windows 2000 can allow an intruder to make an unlimited number of guesses to attempt to determine a password, despite policies intended to limit the number of guesses. Description Domain administrators can set policies governing certain aspects of...
CVE-1999-0359
ptylogin in Unix systems allows users to perform a denial of service by locking out modems, dial out with that modem, or obtain passwords...
Solaris 2.6 / 7 / 8 Lock Users Out of mailx Exploit
Exploit for solaris platform in category dos / poc =================================================== Solaris 2.6 / 7 / 8 Lock Users Out of mailx Exploit =================================================== !/bin/sh Solaris mailx1 username.lock proof of theory makes mailx not work for all users...
Solaris 2.6 7 8 - Lock Users Out of mailx
Solaris 2.6 7 8 - Lock Users Out of mailx !/bin/sh Solaris mailx1 username.lock proof of theory makes mailx not work for all users except those that can erase the lockfile even so mailx will hang for a long time. Tested on Solaris 2.6, 7, 8 by Optyx http://www.uberhax0r.net echo "mailx-lock by...
MS00-089: Domain Account Lockout Vulnerability (274372)
The hotfix for the 'domain account lockout' problem has not been applied. This vulnerability allows a user to bypass the domain account lockout policy, and hence attempt to brute-force a user account. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10555;...
Security Bulletin (MS00-089)`
Microsoft Security Bulletin MS00-089 - -------------------------------------- Patch Available for "Domain Account Lockout" Vulnerability Originally posted: November 21, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Microsoftr Windows 2000. The...