Avast! Antivirus服务器版口令设置绕过安全限制漏洞

Avast! Antivirus是ALMIL公司开发的杀毒软件。 Avast! Antivirus处理用户认证时存在访问验证漏洞，即使已经设置了口令的话，Avast! Antivirus服务器版也可能允许本地用户无需输入口令便更改某些配置。 ALWIL Software Avast! Antivirus Server Edition 4.7.676 ALWIL Software Avast! Antivirus Server Edition 4.7.660 ALWIL Software Avast! Antivirus Server Edition 4.6.566 ALWIL...

CVE-2007-0163

SecureKit Steganography 1.7.1 and 1.8 embeds password information in the carrier file, which allows remote attackers to bypass authentication requirements and decrypt embedded steganography by replacing the last 20 bytes of the JPEG image with alternate password information...

CVE-2006-6662: Undefined Security Weakness

Unspecified vulnerability in Linux User Management novell-lum on SUSE Linux Enterprise Desktop 10 and Open Enterprise Server 9, under unspecified conditions, allows local users to log in to the console without a password...

CVE-2006-0401: Undefined Security Weakness

Unspecified vulnerability in Mac OS X before 10.4.6, when running on an Intel-based computer, allows attackers with physical access to bypass the firmware password and log on in Single User Mode via unspecified vectors...

Mac OS X 10.4.x < 10.4.6 Firmware Unspecified Password Bypass

The remote host is running a version of Mac OS X 10.4.x that is prior to 10.4.6. Mac OS X 10.4.6 contains a security fix for a local authentication bypass vulnerability. A malicious local user may exploit this vulnerability to bypass the firmware password and gain access to Single User mode. This...

CVE-2006-1198: Undefined Security Weakness

Comvigo IM Lock 2006 uses a simple substitution cipher to encrypt a password stored in the msnvs\prc registry value, for which all users have Read permission, which allows local users to bypass the product's blocking functionality by decrypting the password...

CVE-2006-0762: Undefined Security Weakness

WinAbility Folder Guard 4.11 allows local users to gain unauthorized access to certain capabilities of the application by renaming or moving the password file FGuard.FGP, which disables the password requirement...

CVE-2005-4688

PunBB 1.2.9 does not require password entry when changing the e-mail address in an account's profile, which might allow an attacker to make an address change via a hijacked login session...

DEBIAN-CVE-2005-3538

hfaxd in HylaFAX 4.2.3, when PAM support is disabled, accepts arbitrary passwords, which allows remote attackers to gain privileges...

CVE-2005-3741: Undefined Security Weakness

Almond Classifieds does not properly verify the password, which allows attackers to bypass access restrictions...

Fusion SBX Password Bypass and Command Execution

The remote host is running Fusion SBX, a guest book written in PHP. A vulnerability in the remote version of this software allows remote attackers to modify the product SPDX-FileCopyrightText: 2005 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright...

CVE-2005-2879

Advansysperu Software USB Lock Auto-Protect AP 1.5 uses a weak encryption scheme to encrypt passwords, which allows local users to gain sensitive information and bypass USB interface protection...

CVE-2004-2258

Xconfig in Hummingbird Exceed before 9.0.0.1, when the Screen Definition is password-protected, allows local users to access certain options by switching to another tab, then switching back to the original tab...

Acrowave AAP-3100AR wireless router unauthorized access

It's possible to acces device without password...

CVE-2005-1067: Undefined Security Weakness

Vulnerability in Accessuser Class before 1.75 allows local users to gain access as other users via the password "new"...

[Full-disclosure] MSN Plus Password Change Security Bypass Vulnerability

Title: MSN Plus Password Change Security Bypass Vulnerability Risk: Medium Date: 07.04.2005 Publisher: m0fo editor at sec.org.il Source: http://sec.org.il/articles.php?a=187 Vendor: http://www.msgplus.net MSN Plus is additional application for the MSN Messenger. Msn Plus is adding a lot of option...

[SA13302] BNC IRC proxy Incorrect Password Authentication Bypass Vulnerability

TITLE: BNC IRC proxy Incorrect Password Authentication Bypass Vulnerability SECUNIA ADVISORY ID: SA13302 VERIFY ADVISORY: http://secunia.com/advisories/13302/ CRITICAL: Moderately critical IMPACT: Security Bypass WHERE: From remote SOFTWARE: BNC IRC proxy 2.x http://secunia.com/product/1622/...

CVE-2002-1541

BadBlue 1.7 allows remote attackers to bypass password protections for directories and files via an HTTP request containing an extra / slash...

CVE-2002-1541: Undefined Security Weakness

BadBlue 1.7 allows remote attackers to bypass password protections for directories and files via an HTTP request containing an extra / slash...

Mandrake Linux Security Advisory : MySQL (MDKSA-2002:087)

Two vulnerabilities were discovered in all versions of MySQL prior to 3.23.53a and 4.0.5a by Stefan Esser. The first can be used by any valid MySQL user to crash the MySQL server, the other allows anyone to bypass the MySQL password check or execute arbitrary code with the privilege of the user...