Дырка в PCCS MySQL DB Admin Tool

При установке по-умолчанию пароль администрирования находится в файле открытом для чтения и доступном через HTTP...

Roxen Web Server Vulnerability

Hi all, Excuse-me for my poor english : I discover two problems in Roxen Web server 2.0.46 and certainly prior. Perhaps it doesn't important. First problem: Suppose that Roxen is installed by default in /usr/local, the /usr/local/roxen/configurations/configinterface/settings/administratoruid file...

NT admin password change algorithms expose user plaintext passwords

eye-catching subject line, huh? well, under specific circumstances, unfortunately, it's true. as it's now early morning, i shall be reasonably brief. conditions required if using NTLMv1 LmCompatibilibyLevel=0: - NT admin runs USRMGR.EXE or SRVMGR.EXE and either adds a new user, workstation or...

Banner Rotation 01

-- Banner rotating 01 -- -- Description: "Banner rotating 01" is a cgi script distributed for free on several site builder sites, including Hot Area. The script is available on http://www.hotarea.net/web/scripts/banner01/ The cgi script offers numerous functions for those wishing to manage rotati...

Allmanage.pl Admin Password vulnerability

Allmanage.pl Admin Password vulnerability 15 may 2000 Another allmanage.pl vulnerability see also allmanage.pl.txt Everybody can easily get the admin password from the allmanage directory. You are able to set/change lots of variables, add accounts, mail users, backup, restore, edit header/footer...

Newssubmission: Security vulnerability in the ICS HTTPServer component

Hi, There's a security vulnerability in the Delphi Internet Component = Suite's HTTP server. http://www.rtfm.be/fpiette/indexuk.htm These components are widly spread. The vender has been notified of the = flaw. Vulnerability description: The vulnerability let's a person download any file on the...

Черный ход в Cart32

Недокументированная URL http://charon/scripts/cart32.exe/cart32cвыдает список паролей клиентов...

CVE-2000-0184

The vulnerability CVE-2000-0184 affects the Linux printer subsystem via the printtool utility, which incorrectly sets printer configuration files to world-readable. This misconfiguration can allow a local attacker to read printer share passwords stored in those files, leading to potential unautho...

RUS-CERT.200004-01.txt

RUS-CERT Advisory 200004-01: GNU Emacs 20 RUS-CERT, University of Stuttgart 2000-04-18 Summary Several vulnerabilities were discovered in all Emacs versions up to 20.6, namely: Under certain circumstances, unprivileged local users can eavesdrop the communication between Emacs and its subprocesses...

RUS-CERT Advisory 200004-01: GNU Emacs 20

RUS-CERT Advisory 200004-01: GNU Emacs 20 RUS-CERT, University of Stuttgart 2000-04-18 Summary Several vulnerabilities were discovered in all Emacs versions up to 20.6, namely: Under certain circumstances, unprivileged local users can eavesdrop the communication between Emacs and its subprocesses...

Symantec pcAnywhere 9.0 - Weak Encryption

// source: https://www.securityfocus.com/bid/1093/info Symantec pcAnywhere is shipped by default with a weak encryption scheme that is used to encrypt username and password transmittal. Therefore, usernames and password can be retrieved by anyone sniffing the network in between the host computer...

kppp-1.6.14.txt

here exists a bug in kppp 1.6.14 where a local user dialing up into the internet can copy the stars in the password box and put them into an xterm where the stars will be unrevealed and that password will be shown. seeya rarez...

proftpd.mod_sqlpw.txt

A member of the proftpd mailing list and myself discovered a problem with proftpd with modsqlpw.c optional module compiled in. Unix last command reveals passwords where the username should be. A patch was sent to the mailing list, however, the patch only protects ftp localhost not ftp remotehost...

CVE-1999-1475

ProFTPd 1.2 compiled with the modsqlpw module records user passwords in the wtmp log file, which allows local users to obtain the passwords and gain privileges by reading wtmp, e.g. via the last command...

CVE-1999-1092

tin 1.40 creates the .tin directory with insecure permissions, which allows local users to read passwords from the .inputhistory file...

rconsole.passwd.netware.txt

Date: Tue, 6 Oct 1998 02:36:11 -0500 From: Simple Nomad To: [email protected] Subject: NMRC Advisory - "Decryption" of the RCONSOLE Password Jeez I swear we'd be this productive all the time of fully funded. Anyway this makes up for the last one's lameness. -SN Nomad Mobile Research Centre A D...

siteserver.directmail.passwd.txt

From: The Hidden Subject: SiteServerSS 3.0 Direct MailDM, Password in jobs When you create a DM job in SS it creates a file at the following location. \Machine\TMLBQueue\Schedule\ The file is binary with embedded UNICODE text. If you open the file with notepad you can see the account name and...

testtrack.passwd.dos.txt

Date: Mon, 8 Mar 1999 10:58:17 -0500 From: Fabien Royer To: [email protected] Subject: Password and DOS Vulnerability with Testrack bug tracking software TestTrack, a bug tracking software made by Seapine Software http://www.seapine.com has a number of security problems that allow ...

quakenbush-nt-password.txt

L0pht Security Advisory Advisory released Jan. 21, 1999 Application: Quakenbush Windows NT Password Appraiser Severity: Users of the tool Password Appraiser are unwittingly publishing NT user passwords to the internet even if your company is behind a firewall. Author: [email protected]...

IBM AIX 4.2.1 - snap Insecure Temporary File Creation

IBM AIX 4.2.1 - snap Insecure Temporary File Creation source: https://www.securityfocus.com/bid/375/info The snap command is a diagnostic utlitiy for gathering system information on AIX platforms. It can only be executed by root, but it copies various system files into /tmp/ibmsupt/ under...