2131 matches found
CVE-2002-1949
The Network Attached Storage NAS Administration Web Page for Iomega NAS A300U transmits passwords in cleartext, which allows remote attackers to sniff the administrative password...
CVE-2002-1955
Technical details (affected products, versions, root cause, or fixes) are not publicly provided in the supplied documents. Monitor for updates.
CVE-2002-1949
CVE-2002-1949 affects Iomega NAS A300U Admin Web Page, where credentials are transmitted in cleartext over the network, enabling remote password sniffing. Connected docs corroborate the issue and provide limited remediation guidance: IBM bulletin notes remediations for Jazz Foundation products (u...
CVE-2003-0450
The CVE-2003-0450 issue affects Cistron RADIUS daemon (radiusd-cistron) older than or equal to 1.6.6. The vulnerability arises when processing a large NAS-Port attribute, which is interpreted as a negative value and triggers a buffer overflow. This can lead to a remote denial of service and, in s...
CVE-2003-0450
Cistron RADIUS daemon radiusd-cistron 1.6.6 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large value in an NAS-Port attribute, which is interpreted as a negative number and causes a buffer overflow...
Cistron RADIUS buffer overflow
Buffer overflow on NAS-Port above 2^31...
CVE-2002-1955
Iomega NAS A300U uses cleartext LANMAN authentication when mounting CIFS/SMB drives, which allows remote attackers to perform a man-in-the-middle attack...
CVE-2002-1863
Iomega Network Attached Storage NAS A300U, and possibly other models, does not allow the FTP service to be disabled, which allows local users to access home directories via FTP even when access to all shared directories have been disabled...
CVE-2002-1949
The Network Attached Storage NAS Administration Web Page for Iomega NAS A300U transmits passwords in cleartext, which allows remote attackers to sniff the administrative password...
CVE-2001-0620
CVE-2001-0620 affects iPlanet Calendar Server 5.0p2 and earlier. The vulnerability arises because the configuration file stores the Netscape Admin Server (NAS) LDAP credential in cleartext with insecure permissions, allowing a local attacker to obtain the administrator username and password, gain...
