lotus.domino.bypass.txt

--------------------------------------------------------------------------- Web: http://qb0x.net Author: Gabriel A. Maggiotti Date: Febrary 03, 2002 E-mail: [email protected] --------------------------------------------------------------------------- General Info ------------ Problem Type :...

EServ 2.9x - Password-Protected File Access

source: https://www.securityfocus.com/bid/3838/info EServ is a combination Mail, News, Web, FTP and Proxy Server for Microsoft Windows 9x/NT/2000 systems. It is possible to construct a web request which is capable of accessing the contents of password protected files/folders on the webserver, suc...

Cisco 6400 Access Concentrator Node Route Processor 2 (NRP2) module permits telnet access when no password has been set

Overview The Cisco 6400 Access Concentrator Node Route Processor 2 NRP2 module permits unauthenticated telnet access when no password has been set. Description The Access Concentrator Node Route Processor is a router blade for the Cisco 6400. It's purpose is to aggregate and terminate incoming...

Alcatel ADSL Modem Unrestricted Remote Access

On the Alcatel Speed Touch Pro ADSL modem, a protection mechanism feature is available to ensure that nobody can gain remote access to the modem via the WAN/DSL interface. This mechanism guarantees that nobody from outside your network can access the modem's management interface and potentially...

CVE-1999-1076

The CVE-1999-1076 issue concerns idle locking in MacOS 9. A local attacker can bypass password protection of an idled session by choosing Log Out and then Cancel in the logout-confirm dialog, which returns them to the locked session. Documents consistently reference MacOS 9 as affected and descri...

CVE-1999-1430

The CVE-1999-1430 entry concerns PIM software for Royal daVinci that fails to properly password-protect data stored in a Microsoft Access .mdb file, allowing local users to read data by opening the files with another application (e.g., Access). Affected: PIM software for Royal daVinci; Vulnerable...

CVE-1999-1076

Idle locking function in MacOS 9 allows local users to bypass the password protection of idled sessions by selecting the "Log Out" option and selecting a "Cancel" option in the dialog box for an application that attempts to verify that the user wants to log out, which returns the attacker into th...

CVE-1999-1077

Idle locking function in MacOS 9 allows local attackers to bypass the password protection of idled sessions via the programmer's switch or CMD-PWR keyboard sequence, which brings up a debugger that the attacker can use to disable the lock...

CVE-1999-1454

Macromedia "The Matrix" screen saver on Windows 95 with the "Password protected" option enabled allows attackers with physical access to the machine to bypass the password prompt by pressing the ESC Escape key...

CVE-1999-1400: Undefined Security Weakness

The Economist screen saver 1999 with the "Password Protected" option enabled allows users with physical access to the machine to bypass the screen saver and read files by running Internet Explorer while the screen is still locked...

CVE-1999-1076: Undefined Security Weakness

Idle locking function in MacOS 9 allows local users to bypass the password protection of idled sessions by selecting the "Log Out" option and selecting a "Cancel" option in the dialog box for an application that attempts to verify that the user wants to log out, which returns the attacker into th...

Cisco Multiple Devices Unpassworded Account

The remote host appears to be a Cisco router or switch with no password set. This can allow a remote attacker to login to the device and take control of it. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10754; scriptcveid"CVE-1999-0508"; scriptversion "1.23";...

Sambar Server 4.x/5.0 - Insecure Default Password Protection

source: https://www.securityfocus.com/bid/3095/info Sambar Server is a multi-threaded HTTP server for Microsoft Windows and Unix systems. Sambar Server provides insecure default protection for user passwords. The default password decryption algorithm employs only a single key, built into the serv...

3Com SuperStack II PS Hub 40 - TelnetD Weak Password Protection

3Com SuperStack II PS Hub 40 - TelnetD Weak Password Protection source: https://www.securityfocus.com/bid/3034/info A vulnerability exists in certain models of 3Com hubs and potentially other 3Com network products. The affected devices fail to properly restrict the allowed number of login attempt...

Несанкционированный доступ в Active Web Classifieds (unauthorized access)

Ко многим конфигурационным функциям можно обратиться в обход защиты паролем...

Cisco Security Advisory: Cisco 6400 NRP2 Telnet Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Cisco Security Advisory: Cisco 6400 NRP2 Telnet Vulnerability ============================================================================== Revision 1.0 For Public Release 2001 June 14 at 1500 UTC...

CVE-2001-0152

The password protection option for the Compressed Folders feature in Plus! for Windows 98 and Windows Me writes password information to a file, which allows local users to recover the passwords and read the compressed folders...

Alcatel ADSL modems contain a null default password

Overview The San Diego Supercomputer Center SDSC has recently discovered several vulnerabilities in the Alcatel Speed Touch line of Asymmetric Digital Subscriber Line ADSL modems. These vulnerabilities are the result of weak authentication and access control policies and result in one or more of...

Дырка в Ultimate Bulletin Board

Можно посмотреть сообщения в закрытой паролем конференции используя функцию ответа с квотированием...

CGI - mailnews.cgi vulnerability...

Hello BuGReaders... Script: mailnews.cgi Introduction: cat from source CGI-Script MAILNEWS 1.3 This script helps you to maintain a mailinglist. /cat Tested Version: 1.1, 1.3 Author dont parse some characters and he use very stupid "password protection". We can add or delete users from maillist...