[SA17302] Symantec Discovery Database Accounts Null Password

TITLE: Symantec Discovery Database Accounts Null Password SECUNIA ADVISORY ID: SA17302 VERIFY ADVISORY: http://secunia.com/advisories/17302/ CRITICAL: Moderately critical IMPACT: Manipulation of data, Exposure of sensitive information WHERE: From local network SOFTWARE: Symantec Discovery 6.x...

Symantec Discovery Web Accounts Null Password

SUMMARY Risk Impact Medium Remote Access | Yes ---|--- Local Access | Yes Authentication Required | No Exploit publicly available | NA AFFECTED PRODUCTS Product | Version | Solution ---|---|--- ON Command Discovery Standard Edition | 4.5.x | Downloadable Updates ON Command Discovery Web Edition |...

CVE-2004-2443

Jaws 0.3 allows remote attackers to bypass authentication and via an HTTP request to admin.php with the logged cookie set to the MD5 hash of a null password, which is compared against the logged session variable by the loggedon function in application.php...

CVE-2002-1952

phpRank 1.8 does not properly check the return codes for MySQL operations when authenticating users, which could allow remote attackers to authenticate using a NULL password when database errors occur or if the database is unavailable...

CVE-2002-1952: Undefined Security Weakness

phpRank 1.8 does not properly check the return codes for MySQL operations when authenticating users, which could allow remote attackers to authenticate using a NULL password when database errors occur or if the database is unavailable...

CVE-2002-1772

Novell Netware 5.0 through 5.1 may allow local users to gain "Domain Admin" rights by logging into a Novell Directory Services NDS account, and executing "net use" on an NDSADM account that is not in the NT domain but has domain access rights, which allows the user to enter a null password...

CVE-2002-1772: Undefined Security Weakness

Novell Netware 5.0 through 5.1 may allow local users to gain "Domain Admin" rights by logging into a Novell Directory Services NDS account, and executing "net use" on an NDSADM account that is not in the NT domain but has domain access rights, which allows the user to enter a null password...

CVE-2005-0570

profile.php in PunBB 1.2.1 allows remote attackers to cause a denial of service account lockout by setting the user's password to NULL...

CVE-2002-1629

CVE-2002-1629 affects multiple MultiTech ProxyServer models (MTPSR1-100, MTPSR1-120, MTPSR1-202ST, MTPSR2-201, MTPSR3-200). The issue is caused by a default/null password on the remote administration account (supervisor), allowing remote attackers to gain administrative privileges via Telnet or H...

CVE-2002-1629

Multi-Tech ProxyServer products MTPSR1-100, MTPSR1-120, MTPSR1-202ST, MTPSR2-201, and MTPSR3-200 ship with a null password, which allows remote attackers to gain administrative privileges via Telnet or HTTP...

CVE-2002-1629: Undefined Security Weakness

Multi-Tech ProxyServer products MTPSR1-100, MTPSR1-120, MTPSR1-202ST, MTPSR2-201, and MTPSR3-200 ship with a null password, which allows remote attackers to gain administrative privileges via Telnet or HTTP...

Arkeia Possible remote root & information leakage

During the testing of arkeia a few security holes has been discovered. Vulnerable System: Arkeia 4.2.x, 5.2.x and 5.3.x Details: 1. Writable directory $ ls -ld /opt/arkeia/server/dbase/ drwxrwxrwx 10 root root 4096 gru 27 13:40 /opt/arkeia/server/dbase/ 2. Default the "root" account password is s...

CVE-2004-2443

Jaws 0.3 allows remote attackers to bypass authentication and via an HTTP request to admin.php with the logged cookie set to the MD5 hash of a null password, which is compared against the logged session variable by the loggedon function in application.php...

SQL Server Cleartext 'sa' Account NULL Password Attempted Login (deprecated)

Binary data 1108.prm...

OpenSSH < 3.7.1p2 Multiple Remote Vulnerabilities

According to its banner, the remote host appears to be running OpenSSH 3.7p1 or 3.7.1p1. These versions are vulnerable to a flaw in the way they handle PAM authentication when PrivilegeSeparation is disabled. Successful exploitation of this issue may allow an attacker to gain a shell on the remot...

OpenSSH PAM challenge authentication failure

Overview There is a vulnerability in the challenge authentication code of the Portable OpenSSH server when using the SSHv1 protocol and Pluggable Authentication Modules PAM. This vulnerability could permit a remote attacker to log in to the system as any user, including potentially root, without...

MDaemon SMTP Server 5.0.5 - Null Password Authentication

MDaemon SMTP Server 5.0.5 - Null Password Authentication source: https://www.securityfocus.com/bid/8382/info A vulnerability has been reported to affect the MDaemon SMTP authentication handler. It has been reported that any valid username or account can be used in conjunction with a null password...

MDaemon SMTP Server 5.0.5 - Null Password Authentication

source: https://www.securityfocus.com/bid/8382/info A vulnerability has been reported to affect the MDaemon SMTP authentication handler. It has been reported that any valid username or account can be used in conjunction with a null password, to access the MDaemon SMTP server. This issue may be...

MultiTech Proxy Server Default Null Password

The remote MultiTech Proxy Server has no password set for the 'supervisor' account. An attacker may log in the remote host and reconfigure it easily. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11504; scriptversion"1.17"; scriptcvsdate"Date: 2018/11/15 20:50:25";...

CVE-2002-0626: Undefined Security Weakness

Polycom ViewStation before 7.2.4 has a default null password for the administrator account, which allows arbitrary users to conduct unauthorized activities...