591 matches found
CVE-2008-2724
Menalto Gallery before 2.2.5 does not enforce permissions for non-album items that have been protected by a password, which might allow remote attackers to bypass intended access restrictions...
FreeBSD : extman -- password bypass vulnerability (44c8694a-12f9-11dd-9b26-001c2514716c)
Extmail team reports : Emergency update 4 fixes a serious security vulnerability. Successful exploit of this vulnerability would allow attacker to change user's password without knowing it by using specifically crafted HTTP request. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
Design/Logic Flaw
Argument injection vulnerability in Dovecot 1.0.x before 1.0.13, and 1.1.x before 1.1.rc3, when using blocking passdbs, allows remote attackers to bypass the password check via a password containing TAB characters, which are treated as argument delimiters that enable the skippasswordcheck field t...
CVE-2008-1218
Argument injection vulnerability in Dovecot 1.0.x before 1.0.13, and 1.1.x before 1.1.rc3, when using blocking passdbs, allows remote attackers to bypass the password check via a password containing TAB characters, which are treated as argument delimiters that enable the skippasswordcheck field t...
CVE-2008-1218
Argument injection vulnerability in Dovecot 1.0.x before 1.0.13, and 1.1.x before 1.1.rc3, when using blocking passdbs, allows remote attackers to bypass the password check via a password containing TAB characters, which are treated as argument delimiters that enable the skippasswordcheck field t...
CVE-2008-1218
CVE-2008-1218 describes an argument injection vulnerability in Dovecot when using blocking passdbs. The issue occurs because passwords containing TAB characters are treated as argument delimiters, enabling the skip_password_check field to be set and bypass password verification. Affected are Dove...
Belkin F5D9230-4 wireless router unauthorized access
It's possible to access few web administration pages without password...
CVE-2002-2293
CVE-2002-2293 concerns the Webshots Desktop screensaver, where local users can bypass the screensaver password by pressing CTRL-ALT-DELETE and either cancelling the dialog or terminating the screensaver process. The description in the provided records (NVD/CVE entries) confirms a local-privilege-...
kdm password-less login vulnerability
backend/session.c in KDM in KDE 3.3.0 through 3.5.7, when autologin is configured and "shutdown with password" is enabled, allows remote attackers to bypass the password requirement and login to arbitrary accounts via unspecified vectors...
CVE-2007-3455
cgiChkMasterPwd.exe before 8.0.0.142 in Trend Micro OfficeScan Corporate Edition 8.0 allows remote attackers to bypass the password requirement and gain access to the Management Console via an empty hash and empty encrypted password string, related to "stored decrypted user logon information."...
CVE-2007-3455
The CVE-2007-3455 issue affects Trend Micro OfficeScan Corporate Edition 8.0. The vulnerability is in cgiChkMasterPwd.exe, where an empty hash and an empty encrypted password string can lead to the assignment of a valid session ID, enabling remote access to the Management Console. This constitute...
sb-sql.txt
Remote Login Bypass SQL Injection Vulnerability admin.php AYYILDIZ.ORG Presents. SchoolBoard http://free-php-scripts.net/download.php?id=120 author : iLker Kandemir mynet.com Tnx : h0tturk,ekin0x,Dr.Max Virus,Gencnesil,Gencturk,Ajann Vulnerable; /admin.php...
SYMSA-2007-003 Macrovision InstallAnywhere Password and Serial Number Bypass
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Symantec Vulnerability Research http://www.symantec.com/research Security Advisory Advisory ID: SYMSA-2007-003 Advisory Title: Macrovision InstallAnywhere Password and Serial Number Bypass Author: Brian Reilly / [email protected] Release Date:...
CVE-2007-1538
McAfee VirusScan Enterprise 8.5.0.i uses insecure permissions for certain Windows Registry keys, which allows local users to bypass local password protection via the UIP value in 1 HKEYLOCALMACHINE\SOFTWARE\McAfee\DesktopProtection or 2 HKEYLOCALMACHINE\SOFTWARE\Network Associates\TVD\VirusScan...
SYMSA-2007-002: Palm OS Treo Find Feature System Password Bypass
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Symantec Vulnerability Research http://www.symantec.com/research Security Advisory Advisory ID: SYMSA-2007-002 Advisory Title: Palm OS Treo Find Feature System Password Bypass Authors: J.R. Wikes, Matt Cooley, & Scott King Release Date: 14-02-2007...
Avast! Antivirus服务器版口令设置绕过安全限制漏洞
Avast! Antivirus是ALMIL公司开发的杀毒软件。 Avast! Antivirus处理用户认证时存在访问验证漏洞，即使已经设置了口令的话，Avast! Antivirus服务器版也可能允许本地用户无需输入口令便更改某些配置。 ALWIL Software Avast! Antivirus Server Edition 4.7.676 ALWIL Software Avast! Antivirus Server Edition 4.7.660 ALWIL Software Avast! Antivirus Server Edition 4.6.566 ALWIL...
CVE-2007-0163
SecureKit Steganography 1.7.1 and 1.8 embeds password information in the carrier file, which allows remote attackers to bypass authentication requirements and decrypt embedded steganography by replacing the last 20 bytes of the JPEG image with alternate password information...
Mac OS X 10.4.x < 10.4.6 Firmware Unspecified Password Bypass
The remote host is running a version of Mac OS X 10.4.x that is prior to 10.4.6. Mac OS X 10.4.6 contains a security fix for a local authentication bypass vulnerability. A malicious local user may exploit this vulnerability to bypass the firmware password and gain access to Single User mode. This...