952 matches found
WinMX 2.6 - Design Error
WinMX 2.6 - Design Error WinMX Design Error Vendor: Frontcode Technologies Product: WinMX Version: = 2.6 Website: http://www.winmx.com/ BID: 7771 Description: WinMX 2.6 is an older version of the popular file sharing client WinMX. While the current version is 3.31, 2.6 still remains quite popular...
WinMX < 2.6 - Design Error
WinMX Design Error Vendor: Frontcode Technologies Product: WinMX Version: = 2.6 Website: http://www.winmx.com/ BID: 7771 Description: WinMX 2.6 is an older version of the popular file sharing client WinMX. While the current version is 3.31, 2.6 still remains quite popular. Especially amongst user...
CVE-2002-1546
The CVE-2002-1546 issue affects BRS WebWeaver Web Server 1.01 and allows remote attackers to bypass password protections for files and directories by sending an HTTP request that includes a "/./" sequence. This is a path traversal-like bypass vulnerability. According to the source data, the vulne...
CVE-2002-1546
BRS WebWeaver Web Server 1.01 allows remote attackers to bypass password protections for files and directories via an HTTP request containing a "/./" sequence...
CVE-2002-1449
eUpload 1.0 stores the password.txt password file in plaintext under the web document root, which allows remote attackers to overwrite arbitrary files by reading password.txt...
uploader.php vulnerability
Uploader Version 1.1 which is available from http://www.phpscriptcenter.com/uploader.php includes "uploader.php", which lets you upload ANY file even scripts eg. in PHP onto the server if no password protection is specified in the configuration file default set to off. The supplied files will be...
CoffeeCup Software Password Wizard 4.0 - HTML Source Password Retrieval
CoffeeCup Software Password Wizard 4.0 - HTML Source Password Retrieval // source: https://www.securityfocus.com/bid/7023/info A problem with the software may make it possible for remote users to gain unauthorized access to restricted resources. This vulnerability exists in Password Wizard...
Unpassworded 'sync' Account
The account 'sync' has no password set. An attacker may use this to gain further privileges on this system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "sync"; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid11247; scriptversion"1.34";...
Unpassworded 'demos' Account
The account 'demos' has no password set. An attacker may use this account to gain further privileges on the system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "demos"; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid11242; scriptversion"1.35";...
acFTP unauthorized access
Bug in password protection...
[SecurityOffice] BadBlue Web Server v1.7 Protected File Access Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: MD5 - -- BadBlue Web Server v1.7 Protected File Access Vulnerability -- - -- Type File Disclosure - -- Release Date October 24, 2002 - -- Product / Vendor BadBlue is a very small footprint, Win32 web server that supports a suprisingly large array of...
Savant Web Server 3.1 - File Disclosure
Savant Web Server 3.1 - File Disclosure source: https://www.securityfocus.com/bid/5709/info Savant Webserver is vulnerable to an input validation bug, that could allow malicious users access to password protected folders. It should be noted that versions below 3.1 may also be vulnerable to this...
Trillian Instant Messaging 0.x - Credential Encryption
// source: https://www.securityfocus.com/bid/5677/info The Trillian instant messaging client uses weak encryption to store saved authentication credentials for instant messaging services. The credentials are encrypted by using XOR with a static key that is used with every installation of the...
Blazix 1.2 jsp view and free protected folder access
Auriemma Luigi, PivX security advisory Application: Blazix http://www.blazix.com Version: 1.2 and previous Bug: Bad management of files requested with at the end some "bad" characters Risk low: An attacker can view jsp and other server side scripts with the ability to access any password protecte...
Blazix 1.2 - Password Protected Directory Information Disclosure
source: https://www.securityfocus.com/bid/5567/info Blazix is a freely available, open source web server written in Java. It is available for Linux and Microsoft Windows operating systems. Blazix does not properly handle some special characters when appended to requests. By passing a special...
CVE-2002-0304
Lil HTTP Server 2.1 allows remote attackers to read password-protected files via a /./ in the HTTP request...
Password protection bypass in Intel D845 motherboards
Password is not required to select boot device...
LocalWEB2000 2.1.0 Standard - File Disclosure
LocalWEB2000 2.1.0 Standard - File Disclosure source: https://www.securityfocus.com/bid/4820/info A vulnerability exists in LocalWEB2000 related to content password protection. It is possible to have LocalWEB2000 treat files as unprotected by requesting them as files within the '.' current...
LocalWEB2000 2.1.0 Standard - File Disclosure
source: https://www.securityfocus.com/bid/4820/info A vulnerability exists in LocalWEB2000 related to content password protection. It is possible to have LocalWEB2000 treat files as unprotected by requesting them as files within the '.' current directory. If the file http://server/file.txt is set...