CVE-2002-0453

The account lockout capability in Oblix NetPoint 5.2 and earlier only locks out users once for the specified lockout period, which makes it easier for remote attackers to conduct brute force password guessing by waiting until the lockout period ends, then guessing passwords without being locked o...

CVE-2001-1339

Beck IPC GmbH IPC@CHIP telnet service does not delay or disconnect users from the service when bad passwords are entered, which makes it easier for remote attackers to conduct brute force password guessing attacks...

CVE-2001-1175

vipw in the util-linux package before 2.10 causes /etc/shadow to be world-readable in some cases, which would make it easier for local users to perform brute force password guessing...

CVE-1999-1324

The issue affects OpenVMS running on VAXstations (OpenVMS 5.3–5.5-2) with VMS DECwindows or MOTIF, where access to accounts that exceeded the failed-login break-in limit is not properly disabled. This permits brute-force password guessing and is described in PT-1999-1646 as allowing attackers to ...

CVE-1999-1324

VAXstations running Open VMS 5.3 through 5.5-2 with VMS DECwindows or MOTIF do not properly disable access to user accounts that exceed the break-in limit threshold for failed login attempts, which makes it easier for attackers to conduct brute force password guessing...

CVE-2001-0839

CVE-2001-0839 affects the iBill web app’s ibillpm.pl CGI password management. The vulnerability arises from a weak password generation mechanism that creates passwords based on a client’s MASTER_ACCOUNT, enabling brute-force guessing to modify entries in the .htpasswd file via remote access. The ...

CVE-1999-1524

FlowPoint DSL router firmware versions prior to 3.0.8 expose a network-accessible password recovery feature that is not confined to the serial console port, enabling a remote attacker to perform brute-force password guessing. The underlying issue is lack of access control on the password recovery...

PT-2001-2418 · 3Com · 3Com Ps40 Superstack Ii

Name of the Vulnerable Software and Affected Versions: 3Com PS40 SuperStack II affected versions not specified Description: The issue allows remote attackers to perform brute force password guessing without being delayed or disconnected after providing incorrect usernames or passwords, making it...

PT-2001-2463 · Beck Ipc Gmbh · Ipc@Chip

Name of the Vulnerable Software and Affected Versions: Beck IPC GmbH IPC@CHIP affected versions not specified Description: The issue allows remote attackers to conduct brute force password guessing attacks due to the lack of delay or disconnection when bad passwords are entered. This makes it...

PT-2001-1613 · Lightwave · Lightwave Consoleserver 3200

Name of the Vulnerable Software and Affected Versions: Lightwave ConsoleServer 3200 Description: The issue allows remote attackers to conduct brute force password guessing because the system does not disconnect users after unsuccessful login attempts. Recommendations: For Lightwave ConsoleServer...

CVE-2001-0056

The Cisco Web Management interface in routers running CBOS 2.4.1 and earlier does not log invalid logins, which allows remote attackers to guess passwords without detection...

Strip Password Generator 0.30.40.5 - Limited Password-Space

Strip Password Generator 0.30.40.5 - Limited Password-Space // source: https://www.securityfocus.com/bid/2567/info Strip is a password generation utility made freely available by Zetetic Enterprises. Strip is a PalmOS based application designed to generate and store important passwords. A problem...

Strip Password Generator 0.3/0.4/0.5 - Limited Password-Space

// source: https://www.securityfocus.com/bid/2567/info Strip is a password generation utility made freely available by Zetetic Enterprises. Strip is a PalmOS based application designed to generate and store important passwords. A problem with Strip makes it possible for a user that has attained a...

CVE-2001-0056

The Cisco Web Management interface in routers running CBOS 2.4.1 and earlier does not log invalid logins, which allows remote attackers to guess passwords without detection...

CVE-2000-0937

The CVE concerns the Samba Web Administration Tool (SWAT) shipped with Samba 2.0.7, where login attempts that have a correct username but wrong password are not logged. This omission can enable brute-force password guessing by an attacker. Connected sources corroborate that SWAT in Samba 2.0.7 is...

CVE-2000-0937

Samba Web Administration Tool SWAT in Samba 2.0.7 does not log login attempts in which the username is correct but the password is wrong, which allows remote attackers to conduct brute force password guessing attacks...

CVE-2000-1033

Serv-U FTP Server allows remote attackers to bypass its anti-hammering feature by first logging on as a valid user possibly anonymous and then attempting to guess the passwords of other users...

CVE-2000-1037

Check Point Firewall-1 session agent 3.0 through 4.1 generates different error messages for invalid user names versus invalid passwords, which allows remote attackers to determine valid usernames and guess a password via a brute force attack...

Samba 2.0.7 - SWAT Logging Failure

// source: https://www.securityfocus.com/bid/1873/info The Samba software suite is a collection of programs that implements the SMB protocol for unix systems, allowing you to serve files and printers to Windows, NT, OS/2 and DOS clients. This protocol is sometimes also referred to as the LanManag...

Samba 2.0.7 - SWAT Logging Failure

Samba 2.0.7 - SWAT Logging Failure // source: https://www.securityfocus.com/bid/1873/info The Samba software suite is a collection of programs that implements the SMB protocol for unix systems, allowing you to serve files and printers to Windows, NT, OS/2 and DOS clients. This protocol is sometim...