[[ TH 026 Inc. ]] SA #1 - Multiple vulnerabilities in PVote 1.5

Telhack Security Advisory - 1 Name: PVote 1.5b Impact: Minor Content manipulation, Script admin Date: April 18 / 2002 Daniel Nystrm [email protected] I N F O PVote is a PHP voting system. It uses MySQL to hold all information about the system. Author has been notified of all three problems...

[SA-2002:00] Slashcode login vulunerability

SA-2002:00 Slashcode login vulunerability RISK FACTOR: HIGH SYNOPSIS Slash, the code that runs Slashdot and many other web sites, has a vulnerability in recent versions that allows any logged-in user to log in as any other user. This allows users to take nearly full control of a Slash system post...

CVE-2001-0981

HP CIFS/9000 Server SAMBA A.01.07 and earlier with the "unix password sync" option enabled calls the passwd program without specifying the username of the user making the request, which could cause the server to change the password of a different user...

CVE-2001-1302

The change password option in the Windows Security interface for Windows 2000 allows attackers to use the option to attempt to change passwords of other users on other systems or identify valid accounts by monitoring error messages, possibly due to a problem in the NetuserChangePassword function...

Неавторизованный доступ через SSL к LDAP в Windows 2000 (unauthorized access)

При разрешенном доступе к LDAP через SSL можно получить неавторизованный доступ к ряду функций LDAP, включая смену пароля...

Security Bulletin MS01-036

---------------------------------------------------------------------- Title: Function Exposed via LDAP over SSL Could Enable Passwords to be Changed Date: 25 June 2001 Software: Windows 2000 Impact: Privilege Elevation Bulletin: MS01-036 Microsoft encourages customers to review the Security...

another format string bug

There is a format string bug in 'pwc' ftp://ftp.media-com.com.pl/pub/other/pwc.tar.gz. This CGI script is used to change users password via www blah!. writelog call syslog function, which 'eats' ; characters and log it to system logs. But you can paste shellcode into buffers512 and syslog will ru...

Trend Micro's VirusWall: Multiple vunerabilities

InterScan VirusWall - multiple vunerabilities SUMMARY Product: Interscan VirusWall for UNIX Vendor: Trend Micro Testing Platform: RedHat Linux 6.2 vunerable version: 3.0.1 & 3.6.x non-vunerable versions: unknown Vendor: Trend Micro Issues: This advisory covers three separate issues 1 insecure...

CVE-2000-1228

Phorum 3.0.7 allows remote attackers to change the administrator password without authentication via an HTTP request for admin.php3 that sets step, option, confirm and newPssword variables...

CVE-2000-0944

CGI Script Center News Update 1.1 does not properly validate the original news administration password during a password change operation, which allows remote attackers to modify the password without knowing the original password...

PT-2000-1856 · Cgi Script Center · Cgi Script Center News Update

Name of the Vulnerable Software and Affected Versions: CGI Script Center News Update version 1.1 Description: The issue concerns a problem with password validation during a password change operation. Specifically, it does not properly validate the original news administration password, allowing...

News Update 1.1 - Change Admin Password

News Update 1.1 - Change Admin Password / newsexp.c - description ------------------- begin : Sat Oct 21 2000 copyright : C 2000 by Morpheusbd email : [email protected] advisory : www.brightdarkness.de Exploit code for the News Update 1.1 by Morpheusbd For more information see my advisory which...

Дырка в CGI News Update

Поменять пароль можно не зная оригинального пароля...

CVE-2000-0689

Account Manager LITE does not properly authenticate attempts to change the administrator password, which allows remote attackers to gain privileges for the Account Manager by directly calling the amadmin.pl script with the setpasswd parameter...

Дырки в Subscribe Me/Account Manager

Непривелегированный пользователь может поменять пароль администратора...

Дырка в Blackboard Courseinfo

Непроверяемый ввод пользователя позволяет поменять пароль любого пользователя или создать нового...

CVE-2000-0045

CVE-2000-0045 affects MySQL: local users can modify passwords for arbitrary MySQL users via the GRANT privilege. The vulnerability is documented in CVE/NVD with a base score of 6.4 (MEDIUM). Connected documents confirm the issue but do not provide explicit affected versions or remediation details...

McMurtreyWhitaker Associates Cart32 2.63.0 - Remote Administration Password

McMurtreyWhitaker Associates Cart32 2.63.0 - Remote Administration Password source: https://www.securityfocus.com/bid/1153/info Within cart32.exe, entering any password by way of http://target/scripts/cart32.exe/cart32clientlist, a remote user could obtain vital client information such as usernam...

Pocsag POC32 Remote Service Default Password (password)

It is possible to log into the remote pocsag service and view the streams of decoded pager messages using the password 'password'. An attacker may use this problem to gain some knowledge about the computer user and then trick him by social engineering. C Tenable Network Security, Inc...

MySQL 3.22.273.22.293.23.8 - GRANT Global Password Changing

MySQL 3.22.273.22.293.23.8 - GRANT Global Password Changing source: https://www.securityfocus.com/bid/926/info MySQL is a popular RDBMS used by many websites as a back-end. It is possible for users with GRANT access to change passwords for every user in the database including the mysql superuser...