299 matches found
Facebook: You Should Only Friend People You Know. Seriously. We're Not Kidding.
After a string of controversies over promiscuous data sharing and account takeovers, social networking giant, Facebook, has released a 13 page guide for users who want to secure their Facebook account. Among other things, the 700 million strong social network is warning its users to only “Friend”...
Mozilla Releases BrowserID Web Authentication System
Mozilla has released a new browser-based federated login mechanism called BrowserID that is designed to replace the login process on Web sites that requires users to supply an email and password. The experimental system relies on the Verified Email protocol and also works on other browsers,...
LastPass Asks Users To Change Password After Probable Breach
ED: LastPass Asks Users To Change Password After Probable Breach DEK: The Web based password management firm says it detected what it thinks is a breach that could have exposed some customer passwords. LastPass, a Web based password management firm, advised its customers to change the password th...
LastPass Forces Users to Change Master Passwords Following Suspicious Activity
LastPass, one of the most popular cloud-based password management services, is forcing users to change their master passwords as a precaution after it discovered an unauthorized data transfer out of its network. In a post on its blog the company explains, in sufficient detail, what prompted this...
Password Management Site LastPass Sports Security Hole
Web surfers frustrated with the task of managing a forest of user names and passwords have been flocking to LastPass in an effort to simplify. But now a a security researcher says that a security flaw in that company’s Web site could reveal sensitive account details. Mike Cardwell, an independent...
Syncrify < 2.1 Build 420 Multiple Security Bypass Vulnerabilities
According to its version, the remote installation of Syncrify is affected by multiple security bypass vulnerabilities : - The application fails to restrict access to the password management page and allows users to change the administrator's password by directly accessing that page. - It is...
Why You Should Write Down Your Passwords
Common wisdom over the last couple of decades has been to never write down the passwords you use for accessing networked services. But is now the time to begin writing them down? Threats are constantly evolving and perhaps it’s time to revisit one of the longest standing idioms of security – “nev...
MDVA-2009:249 : mdkonline
This update fixes several issues regarding the live upgrade to a more recent distribution, notably: - new distributions are now only presented after all updates were applied. - if current distribution is no more supported, we will warn about it and offer to upgrade to a newer release - makes the...
CVE-2007-4309
CVE-2007-4309 affects IBM Lotus Notes 5.x through 7.0.2. The description states that user‑assisted remote authenticated administrators can obtain a cleartext notes.id password by setting notes.ini (1) KFM_ShowEntropy and (2) Debug_Outfile, making this a vulnerability separate from CVE-2005-2696. ...
Citrix MetaFrame密码管理信息泄露漏洞
Citrix MetaFrame是流行的强大的应用服务器及应用入口软件解决方案。 Citrix MetaFrame密码管理程序存在设计错误，本地攻击者可以利用漏洞绕过策略查看密码信息。 Citrix MetaFrame密码管理程序允许管理员控制用户可查看属于他们的第二密码，版本2.5及之前版本允许用户即使管理员设置了禁止查看的情况下也能查看第二密码信息。 当查看配置的应用程序密码字段以星号方式显示给用户，可导致用户使用密码查看工具获得此字段的明文密码信息。 Citrix MetaFrame Password Manager 2.5 Citrix MetaFrame Password...
CVE-2006-4399
User interface inconsistency in Workgroup Manager in Apple Mac OS X 10.4 through 10.4.7 appears to allow administrators to change the authentication type from crypt to ShadowHash passwords for accounts in a NetInfo parent, when such an operation is not actually supported, which could result in le...
Multiple vulnerabilities in TK8 Safe v.3.0.5
Multiple vulnerabilities in TK8 Safe v.3.0.5 July 3, 2006 ---- Summary: TK8 Safe www.tk8.com is a password management application, which stores authentication details and other sensitive data in encrypted local folders. A number of issues have been discovered in version 3.0.5 of the application...
ibillpm.pl
The 'ibillpm.pl' CGI is installed. Some versions of this CGI use a weak password management system that can be brute-forced. No flaw was tested. Your script might be a safe version. Solutions : upgrade the script if possible. If not: 1 Move the script elsewhere security through obscurity 2 Reques...
ibillpm.pl
The SPDX-FileCopyrightText: 2002 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.11083";...
Default password 'ibmdb2' for account 'db2fenc1' (SSH/Telnet)
The account SPDX-FileCopyrightText: 2003 Chris Foster Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.11861";...
CVE-2004-2396
passwd 0.68 does not check the return code for the pamstart function, which has unknown impact and attack vectors that may prevent "safe and proper operation" of PAM...
[Gosecure Adivsory] Neoteris IVE Vulnerability
Gosecure Advisory http://www.gosecure.ca Neoteris IVE changepassword.cgi Authentication Bypass Date Published: 2004-09-20 Date Discovered: 2004-07-23 Advisory ID: GOSECURE-2004-10 Class: Design Error Risk: Medium Vendor: Juniper Networks www.juniper.net Advisory URL:...
leak of information in counterpane/Bruce Schneier's (now open source) Password Safe program
Program description: --- Password Safe is a tool that allows you to have a different password for all the different programs and websites that you deal with, without actually having to remember all those usernames and passwords. Originally created by Bruce Schneier's Counterpane Labs, Password Sa...
Multiple Vulnerabilities In P-Synch Password Management
Multiple Vulnerabilities In P-Synch Password Management ------------------------------------------------------- The other night I came across a server running P-Synch. I had never heard of it so i was curious to poke around on it a bit. Within an hour i found the vulns listed below. Im pretty sur...
P-Synch < 6.2.5 - Multiple Vulnerabilities
P-Synch Multiple Vulnerabilities Vendor: M-Tech Identity Management Solutions Product: P-Synch Version: VBScript, JScript etc https://path/to/psynch/nph-psa.exe?css="VBScript, JScript etc File Include Vulnerability: https://path/to/psynch/nph-psf.exe?css=http://somesite/file...