472 matches found
CVE-2001-0978
CVE-2001-0978 affects HP-UX 10.26 where failed login attempts are not recorded in /var/adm/btmp, enabling brute‑force password guessing without detection via lastb. Severity in NVD shows High (CVSSv2 base 7.5, network access, no authentication). The entry notes the absence of observation of faile...
CVE-2002-1647
The quick login feature in Slash Slashcode does not redirect the user to an alternate URL when the wrong password is provided, which makes it easier for remote web sites to guess the proper passwords by reading the username and password from the Referrer URL...
CVE-2002-2028
The screensaver on Windows NT 4.0, 2000, XP, and 2002 does not verify if a domain account has already been locked when a valid password is provided, which makes it easier for users with physical access to conduct brute force password guessing...
CVE-2002-1654
iPlanet Web Server Enterprise Edition and Netscape Enterprise Server 4.0 and 4.1 allows remote attackers to conduct HTTP Basic Authentication via the wp-force-auth Web Publisher command, which provides a distinct attack vector and may make it easier to conduct brute force password guessing withou...
PT-2002-2839 · Novell · Novell Edirectory
Name of the Vulnerable Software and Affected Versions: Novell eDirectory versions 8.6.2 through 8.7 Description: The issue allows remote attackers to conduct brute force password guessing more easily due to the use of case insensitive passwords. Recommendations: For Novell eDirectory versions 8.6...
MySQL 3.23.x4.0.x - COM_CHANGE_USER Password Length Account
MySQL 3.23.x4.0.x - COMCHANGEUSER Password Length Account / source: https://www.securityfocus.com/bid/6373/info A flaw in the password authentication mechanism for MySQL may make it possible for an authenticated database user to compromise the accounts of other database users. The flaw lies in th...
MySQL 3.23.x/4.0.x - 'COM_CHANGE_USER' Password Length Account
/ source: https://www.securityfocus.com/bid/6373/info A flaw in the password authentication mechanism for MySQL may make it possible for an authenticated database user to compromise the accounts of other database users. The flaw lies in the fact that the server uses a string returned by the clien...
CVE-2002-0453
The account lockout capability in Oblix NetPoint 5.2 and earlier only locks out users once for the specified lockout period, which makes it easier for remote attackers to conduct brute force password guessing by waiting until the lockout period ends, then guessing passwords without being locked o...
CVE-2001-1175
CVE-2001-1175 : In vipw from the util-linux package, before version 2.10, editing /etc/shadow could leave the file world-readable in some cases, enabling local users to more easily perform brute-force password guessing. Supported details in connected docs show Red Hat advisories (RHSA-2001:95, 13...
CVE-2002-0453
The account lockout capability in Oblix NetPoint 5.2 and earlier only locks out users once for the specified lockout period, which makes it easier for remote attackers to conduct brute force password guessing by waiting until the lockout period ends, then guessing passwords without being locked o...
CVE-2001-1339
Beck IPC GmbH IPC@CHIP telnet service does not delay or disconnect users from the service when bad passwords are entered, which makes it easier for remote attackers to conduct brute force password guessing attacks...
CVE-2001-1175
vipw in the util-linux package before 2.10 causes /etc/shadow to be world-readable in some cases, which would make it easier for local users to perform brute force password guessing...
CVE-1999-1324
The issue affects OpenVMS running on VAXstations (OpenVMS 5.3–5.5-2) with VMS DECwindows or MOTIF, where access to accounts that exceeded the failed-login break-in limit is not properly disabled. This permits brute-force password guessing and is described in PT-1999-1646 as allowing attackers to ...
CVE-1999-1324
VAXstations running Open VMS 5.3 through 5.5-2 with VMS DECwindows or MOTIF do not properly disable access to user accounts that exceed the break-in limit threshold for failed login attempts, which makes it easier for attackers to conduct brute force password guessing...
CVE-2001-0839
CVE-2001-0839 affects the iBill web app’s ibillpm.pl CGI password management. The vulnerability arises from a weak password generation mechanism that creates passwords based on a client’s MASTER_ACCOUNT, enabling brute-force guessing to modify entries in the .htpasswd file via remote access. The ...
CVE-1999-1524
FlowPoint DSL router firmware versions prior to 3.0.8 expose a network-accessible password recovery feature that is not confined to the serial console port, enabling a remote attacker to perform brute-force password guessing. The underlying issue is lack of access control on the password recovery...
PT-2001-2418 · 3Com · 3Com Ps40 Superstack Ii
Name of the Vulnerable Software and Affected Versions: 3Com PS40 SuperStack II affected versions not specified Description: The issue allows remote attackers to perform brute force password guessing without being delayed or disconnected after providing incorrect usernames or passwords, making it...
PT-2001-1613 · Lightwave · Lightwave Consoleserver 3200
Name of the Vulnerable Software and Affected Versions: Lightwave ConsoleServer 3200 Description: The issue allows remote attackers to conduct brute force password guessing because the system does not disconnect users after unsuccessful login attempts. Recommendations: For Lightwave ConsoleServer...
PT-2001-2463 · Beck Ipc Gmbh · Ipc@Chip
Name of the Vulnerable Software and Affected Versions: Beck IPC GmbH IPC@CHIP affected versions not specified Description: The issue allows remote attackers to conduct brute force password guessing attacks due to the lack of delay or disconnection when bad passwords are entered. This makes it...