Default Password (wank) for 'wank' Account

The account 'wank' has the password 'wank'. An attacker may use this to gain further privileges on this system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "wank"; password = "wank"; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid11260;...

Default Password (lrkr0x) for 'gamez' Account

The account 'gamez' has the password 'lrkr0x'. An attacker may use this to gain further privileges on this system. %NASLMINLEVEL 70300 C Tenable Netowrk Security, Inc. account = "gamez"; password = "lrkr0x"; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid11263;...

iBill ibillpm.pl Password Generation Weakness

The remote host is running iBill, an internet billing application. Some versions of the 'ibillpm.pl' CGI use a weak password management system that can be brute-forced. No flaw was tested. Your script might be a safe version. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Script audit and...

Bug in Eupload

Bug in Eupload ----------------- | By ZeroByte || [email protected] | | ICQ 98177781 | 1.1 - What is Eupload? Eupload, is an web utility used to facilitate the update of web sites by means of scripts CGI. This tool allows the ascent of files to the servant by means of an web interface. The...

Microsoft Windows - Local Users Information : Can't Change Password

Using the supplied credentials, Nessus was able to list local users who can not change their own passwords. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10912; scriptversion"1.21"; scriptcvsdate"Date: 2018/08/13 14:32:39"; scriptnameenglish:"Microsoft Windows - Loc...

CVE-2001-0839

ibillpm.pl in iBill password management system generates weak passwords based on a client's MASTERACCOUNT, which allows remote attackers to modify account information in the .htpasswd file via brute force password guessing...

CVE-2001-0839

ibillpm.pl in iBill password management system generates weak passwords based on a client's MASTERACCOUNT, which allows remote attackers to modify account information in the .htpasswd file via brute force password guessing...

iBill Management Script - Weak Hard-Coded Password

iBill Management Script - Weak Hard-Coded Password source: https://www.securityfocus.com/bid/3476/info iBill is an Internet billing company that provides secure payment processing for e-commerce. A vulnerability exists in iBill's CGI password management script called ibillpm.pl. The default...

iBill Management Script - Weak Hard-Coded Password

source: https://www.securityfocus.com/bid/3476/info iBill is an Internet billing company that provides secure payment processing for e-commerce. A vulnerability exists in iBill's CGI password management script called ibillpm.pl. The default password is the client's MASTERACCOUNT name plus two low...

PassWD2000 v2.x Weak Encryption Vulnerability

== PassWD2000 v2.x Weak Encryption Vulnerability =============== "Success does not consist in never making mistakes but in never making the same one a second time" --- George Bernard Shaw Vulnerable: PassWD2000 2.0 PassWD2000 2.1 PassWD2000 2.2 PassWD2000 2.3 PassWD2000 2.4 PassWD2000 2.5...

Visible Systems Razor 4.1 - Password File (2)

source: https://www.securityfocus.com/bid/1424/info The Razor Configuration Management program stores passwords in an insecure manner. A local attacker can obtain the Razor passwords, and either seize control of the software and relevant databases or use those passwords to access other users'...

3R Soft MailStudio 2000 2.0 - Arbitrary File Access

source: https://www.securityfocus.com/bid/1335/info MailStudio 2000 is vulnerable to multiple attacks. It is possible for a remote user to gain read access to all files located on the server via the usage of the "/.." string passed to a CGI, thereby compromising the confidentiality of other users...

PassWD 1.2 - Weak Encryption

// source: https://www.securityfocus.com/bid/1300/info PassWd 1.2 is a password management utility designed to store user login information to various URLs. The login information, which includes username, password and link location is stored in the pass.dat file which resides in the PassWD...

PassWD 1.2 - Weak Encryption

PassWD 1.2 - Weak Encryption // source: https://www.securityfocus.com/bid/1300/info PassWd 1.2 is a password management utility designed to store user login information to various URLs. The login information, which includes username, password and link location is stored in the pass.dat file which...

Sambar Server /sysadmin Default Accounts

The Sambar webserver is running. It provides a web interface for configuration purposes. The admin user has no password and there are some other default users without passwords. Everyone could set the HTTP-Root to c:\ and delete your files! this may be a false positive - go to...

padlock-it.txt

Date: Fri, 19 Feb 1999 13:51:39 -0500 EST From: ET LoWNOISE To: [email protected] Cc: [email protected] Subject: PADLOCK-IT and TwoFish Hi, 2 months ago, i deliver this advisory to bugtraq... but now i have found that this program is more popular than ever because have been show...

slmail3.txt

Date: Fri, 4 Sep 1998 16:38:13 +0100 From: Mnemonix Subject: SL-Mail ver 3.0.2423 security Hi, I thought I'd write to advise of a security issue with SLMail version 3.0.3423. Other versions may also be affected. During the install you choose whether the passowrd is set to the account name,...

PADLOCK.txt

LOWNOISE Advisory: [email protected] by ET. PADLOCK-IT 1.01 =============== DISCLAIMER: Learn, there are dark things behind a nice GUI. Well, maybe this isnt a topic for bugtraq but many people is using this kind of programs to protect all kind of passwords. Dial-up passwords, UNIX accounts, etc...

Solaris 2.4 passwd yppasswd nispasswd - Local Overflow

Solaris 2.4 passwd yppasswd nispasswd - Local Overflow ---------------------------- file newpass.c ------------------------------- include include define hiddenpasswd "/bin/hpasswd" /change here .../ define MAXLENGTH 32 void mainint argc, char argv int i; char args10; ifargc MAXLENGTH printf"You...