180 matches found
NetSupport School 7.07.5 - Weak Password Encryption
NetSupport School 7.07.5 - Weak Password Encryption source: https://www.securityfocus.com/bid/9981/info NetSupport School is prone to a password-encryption vulnerability because the application fails to protect passwords with a sufficiently effective encryption scheme. Exploiting this issue may...
Spaiz-Nuke/PHP-nuke multiple bugs
SQL injection during authentication, SQL injection in web-link module, SQL injection in download module, access with encrypted password...
OpenSSH PAM challenge authentication failure
Overview There is a vulnerability in the challenge authentication code of the Portable OpenSSH server when using the SSHv1 protocol and Pluggable Authentication Modules PAM. This vulnerability could permit a remote attacker to log in to the system as any user, including potentially root, without...
Half-Life StatsMe 2.6.x Plugin - MakeStats Format String
Half-Life StatsMe 2.6.x Plugin - MakeStats Format String // source: https://www.securityfocus.com/bid/6578/info // The Half-Life StatsMe plug-in is prone to an exploitable format string vulnerability. This issue may be exploited by an attacker who can authenticate with the rcon-password of the...
[SECURITY] [DSA 177-1] New PAM packages fix serious security violation in Debian/unstable
-------------------------------------------------------------------------- Debian Security Advisory DSA 177-1 [email protected] http://www.debian.org/security/ Martin Schulze October 17th, 2002 http://www.debian.org/security/faq -...
pam - serious security violation
A serious security violation in PAM was discovered. Disabled passwords i.e. those with '' in the password file were classified as empty password and access to such accounts is granted through the regular login procedure getty, telnet, ssh. This works for all such accounts whose shell field in the...
AirConnect Default Password
This AirConnect wireless access point still has the default password set for the web interface. This could be abused by an attacker to gain full control over the wireless network settings. This script was written by H D Moore Information about the AP provided by Brian Caswell Chnages by Tenable :...
SnapStream Personal Video Station 1.2 a - PVS Directory Traversal
SnapStream Personal Video Station 1.2 a - PVS Directory Traversal source: https://www.securityfocus.com/bid/3100/info Snapstream Personal Video Station is an application for Microsoft Windows which allows users to record video output on their PC and view it at a later time, locally or via an HTTP...
CVE-2001-0290
Vulnerability in Mailman 2.0.1 and earlier allows list administrators to obtain user passwords...
CVE-2001-0290
Vulnerability in Mailman 2.0.1 and earlier allows list administrators to obtain user passwords...
[Mailman-Announce] ANNOUNCE Mailman 2.0.2 (important privacy patch)
I've just uploaded the Mailman 2.0.2 release to SourceForge. This is a bug fix release that also fixes a potential privacy hole, which could allow a list administrator to get access to user passwords. Even with those passwords, I believe there's little additional harm that a list admin could do,...
Дырка в mailman (user passwords access)
Администратор списков может получить доступ к паролям пользователям...
Дырка в Mac OS 9 (Multiple Users Control Panel Password)
Удалив файл паролей пользователь может получить доступ с правами администратора...
CVE-2000-1008
PalmOS 3.5.2 and earlier uses weak encryption to store the user password, which allows attackers with physical access to the Palm device to decrypt the password and gain access to the device...
CVE-2000-1008
PalmOS 3.5.2 and earlier uses weak encryption to store the user password, which allows attackers with physical access to the Palm device to decrypt the password and gain access to the device...
Дырки в CiscoSecure ACS
Многочисленные ошибки с переполнением буфера,кроме того опльзователь с пустым LDAP-паролем могу получить ena-доступ...
CVE-2000-0434
The administrative password for the Allmanage web site administration software is stored in plaintext in a file which could be accessed by remote attackers...
perliis.txt
http://www.rootshell.com/ From [email protected] Sun Jul 12 17:42:29 1998 Date: Mon, 13 Jul 1998 01:31:11 +0100 From: Mnemonix To: [email protected] Subject: New Perl.exe, IIS exploit Russ Cooper of ntbugtraq seems unwilling to publish this information - perhaps it shows how to exploit th...
iomega-onestep-backup.txt
Date: Thu, 14 Jan 1999 09:39:05 -0800 From: aberrant To: [email protected] Subject: Shoddy encryption in Iomega One-Step Backup fwd I searched the archives and didn't find anything regarding this. The vendor was notified over a week ago and, aside from the standard "Thank you for your concern"...