1029 matches found
CVE-2000-1023
The Alabanza Control Panel does not require passwords to access administrative commands, which allows remote attackers to modify domain name information via the nsManager.cgi CGI program...
PostACI Webmail Vulnerability
The PostACI webmail system contains a rather trival vulnerability. One can obtain the hostname, username and password variables for the MySQL server in addition to other setup information if PostACI is setup as described running out of the box by simplying going to the url:...
24Link Webserver
24Link 1.06 Web Server x PROBLEM: A vulnerability was found in 24Link 1.06 Web Server for Windows 95/98/2000/NT machines. The vulnerability allows you to view any password protected files on the Web Server, provided that the Authorization - Check User Name and Password- On all Requests option...
Дырка в 24Link Webserver (avoid password protection )
Добавление спец символов к имени файла позволяет обойти защиту файла паролем...
En: ubb hole
----- Original Message ----- From: tdf To: [email protected] Sent: Monday, November 20, 2000 2:46 PM Subject: ubb hole ----------------------------------------------------------------------------------- Ultimate Bulletin Board - Private forums security hole, by tdf [email protected]...
Decrypting passwords for BrowseGate
Product: BrowseGate by NetCPlus Version: 2.80.2 others? OS: Windows NT/2000/9x Description: BrowseGate is a proxy firewall from NetCPlus. BrowseGate is sometimes installed on servers along with other network applications including SmartServer3 with which it is made to integrate. BrowseGate instal...
Cisco IOS 12 - Software '?/' HTTP Request Denial of Service
source: https://www.securityfocus.com/bid/1838/info Cisco devices running IOS software may be prone to a denial of service attack if a URL containing a question mark followed by a slash ?/ is requested. The device will enter an infinite loop when supplied with a URL containing a "?/" and an enabl...
CVE-2000-0777
The password protection feature of Microsoft Money can store the password in plaintext, which allows attackers with physical access to the system to obtain the password, aka the "Money Password" vulnerability...
CVE-2000-0777: Undefined Security Weakness
The password protection feature of Microsoft Money can store the password in plaintext, which allows attackers with physical access to the system to obtain the password, aka the "Money Password" vulnerability...
Nortel Networks Router Unpassworded Account (manager Level)
The remote Nortel Networks former Bay Networks router has no password for the manager account. An attacker could telnet to the router and reconfigure it to lock you out of it. This could prevent you from using your Internet connection. This script was written by Victor Kirhenshtein Based on...
Palm OS 3.5.2 - Weak Encryption
Palm OS 3.5.2 - Weak Encryption source: https://www.securityfocus.com/bid/1715/info Palm OS is shipped with a security feature which enables a user to set password protection on various applications.The HotSync process allows a user to connect to a machine on the network through their Palm device...
Palm OS 3.5.2 - Weak Encryption
source: https://www.securityfocus.com/bid/1715/info Palm OS is shipped with a security feature which enables a user to set password protection on various applications.The HotSync process allows a user to connect to a machine on the network through their Palm device. This process involves the devi...
Security Bulletin (MS00-061)
Microsoft Security Bulletin MS00-061 - -------------------------------------- Patch Available for "Money Password" Vulnerability Originally posted: August 25, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Microsoftr Money. The vulnerability could...
CVSweb Detection
CVSweb is a web interface for a CVS repository. It allows users to browse through the history of the source code of a given project. If your environement contains sensitive source code, then access to this CGI should be password-protected. C Tenable Network Security, Inc. include"compat.inc";...
rsh Unauthenticated Access (via finger Information)
Using common usernames as well as the usernames reported by 'finger', Nessus was able to log in through rsh. Either the accounts are not protected by passwords or the /.rhosts files are not configured properly. This vulnerability is confirmed to exist in Cisco Prime LAN Management Solution, but...
CVE-2000-0144
CVE-2000-0144 (Axis 700 Network Scanner) involves improper access control: administrator URLs are not properly restricted, permitting a dot-dot directory traversal to bypass password protection. Affected: Axis 700 Network Scanner; Trigger: access to admin URLs via .. traversal; Impact: password b...
CVE-2000-0144
Axis 700 Network Scanner does not properly restrict access to administrator URLs, which allows users to bypass the password protection via a .. dot dot attack...
Cayman DSL Router Unauthenticated Access
The remote router has no password. An intruder may connect to it and disable it easily. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10345; scriptversion "1.16"; scriptcveid"CVE-1999-0508"; scriptnameenglish:"Cayman DSL Router Unauthenticated Access";...
SalesLogix Eviewer Web App Bug: URL request crashes eviewer web application
Disclaimer: The opinions expressed in this advisory and program are my own and not of any company. The usual standard disclaimer applies, I am not liable for any damages caused by direct or indirect use of the information or functionality provided by this advisory. I bear NO responsibility for...