1029 matches found
CoffeeCup Software Password Wizard 4.0 - HTML Source Password Retrieval
CoffeeCup Software Password Wizard 4.0 - HTML Source Password Retrieval // source: https://www.securityfocus.com/bid/7023/info A problem with the software may make it possible for remote users to gain unauthorized access to restricted resources. This vulnerability exists in Password Wizard...
Unpassworded 'demos' Account
The account 'demos' has no password set. An attacker may use this account to gain further privileges on the system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "demos"; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid11242; scriptversion"1.35";...
Unpassworded 'sync' Account
The account 'sync' has no password set. An attacker may use this to gain further privileges on this system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "sync"; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid11247; scriptversion"1.34";...
acFTP unauthorized access
Bug in password protection...
[SecurityOffice] BadBlue Web Server v1.7 Protected File Access Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: MD5 - -- BadBlue Web Server v1.7 Protected File Access Vulnerability -- - -- Type File Disclosure - -- Release Date October 24, 2002 - -- Product / Vendor BadBlue is a very small footprint, Win32 web server that supports a suprisingly large array of...
Savant Web Server 3.1 - File Disclosure
Savant Web Server 3.1 - File Disclosure source: https://www.securityfocus.com/bid/5709/info Savant Webserver is vulnerable to an input validation bug, that could allow malicious users access to password protected folders. It should be noted that versions below 3.1 may also be vulnerable to this...
Trillian Instant Messaging 0.x - Credential Encryption
// source: https://www.securityfocus.com/bid/5677/info The Trillian instant messaging client uses weak encryption to store saved authentication credentials for instant messaging services. The credentials are encrypted by using XOR with a static key that is used with every installation of the...
Blazix 1.2 jsp view and free protected folder access
Auriemma Luigi, PivX security advisory Application: Blazix http://www.blazix.com Version: 1.2 and previous Bug: Bad management of files requested with at the end some "bad" characters Risk low: An attacker can view jsp and other server side scripts with the ability to access any password protecte...
Blazix 1.2 - Password Protected Directory Information Disclosure
source: https://www.securityfocus.com/bid/5567/info Blazix is a freely available, open source web server written in Java. It is available for Linux and Microsoft Windows operating systems. Blazix does not properly handle some special characters when appended to requests. By passing a special...
CVE-2002-0304
Lil HTTP Server 2.1 allows remote attackers to read password-protected files via a /./ in the HTTP request...
Password protection bypass in Intel D845 motherboards
Password is not required to select boot device...
LocalWEB2000 2.1.0 Standard - File Disclosure
LocalWEB2000 2.1.0 Standard - File Disclosure source: https://www.securityfocus.com/bid/4820/info A vulnerability exists in LocalWEB2000 related to content password protection. It is possible to have LocalWEB2000 treat files as unprotected by requesting them as files within the '.' current...
LocalWEB2000 2.1.0 Standard - File Disclosure
source: https://www.securityfocus.com/bid/4820/info A vulnerability exists in LocalWEB2000 related to content password protection. It is possible to have LocalWEB2000 treat files as unprotected by requesting them as files within the '.' current directory. If the file http://server/file.txt is set...
CVE-2002-0304
Lil HTTP Server 2.1 is affected by a path traversal vulnerability that lets remote attackers read password-protected files by including a /./ sequence in the HTTP request. The available documents confirm the affected product and the vulnerable behavior but do not provide details on attacker explo...
CVE-2002-0304
Lil HTTP Server 2.1 allows remote attackers to read password-protected files via a /./ in the HTTP request...
CVE-2002-0100
AOL AOLserver 3.4.2 Win32 allows remote attackers to bypass authentication and read password-protected files via a URL that directly references the file...
CVE-2002-0112
The CVE-2002-0112 entry affects Etype Eserv 2.97 . Affected component: password-protected file disclosure via a crafted URL containing /./ , enabling remote attackers over the network to view protected files. The available data confirms the vulnerability and impact (partial confidentiality) but p...
CVE-2002-0100
AOL AOLserver 3.4.2 Win32 allows remote attackers to bypass authentication and read password-protected files via a URL that directly references the file...
CVE-2001-0757
Cisco 6400 NRP2 (Access Concentrator Node Route Processor 2) is affected on IOS releases earlier than 12.1(05)DC01. The module lets Telnet access occur when no vty password is set, enabling a remote attacker to gain unauthorized access and potentially modify device configuration or affect traffic...