1146 matches found
CVE-2002-0310
CVE-2002-0310 affects Netwin WebNews 1.1k CGI. The issue arises from default usernames and cleartext passwords that cannot be deleted by the administrator, enabling remote attackers to gain privileges using the listed credential pairs (testweb/newstest, alwn3845/imaptest, alwi3845/wtest3452, test...
Microsoft Windows - Local Users Information : Never Changed Passwords
Using the supplied credentials, Nessus was able to list local users who have never changed their passwords. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10914; scriptversion"1.22"; scriptcvsdate"Date: 2019/07/08 10:52:29"; scriptnameenglish:"Microsoft Windows - Loc...
CVE-2001-1190
The default PAM files included with passwd in Mandrake Linux 8.1 do not support MD5 passwords, which could result in a lower level of password security than intended...
CVE-2001-1111
CVE-2001-1111 concerns EFTP 2.0.7.337, where user passwords are stored in plaintext in the file eftp2users.dat. The issue is a plaintext credential exposure, with the NVD vector indicating local access, low complexity, and no authentication required to obtain partial confidentiality, partial inte...
CVE-2001-1190
CVE-2001-1190 concerns Mandrake Linux 8.1 where the default PAM files used by the passwd program do not support MD5 passwords. The root cause stated in connected advisories is the lack of MD5 support in the default PAM configuration, which can yield weaker password security than intended. The evi...
Microsoft Windows - Users Information : Never Changed Password
Using the supplied credentials, Nessus was able to list users who have never changed their passwords. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10898; scriptversion"1.23"; scriptcvsdate"Date: 2018/08/13 14:32:39"; scriptnameenglish:"Microsoft Windows - Users...
CVE-2001-0757
Cisco 6400 Access Concentrator Node Route Processor 2 NRP2 12.1DC card does not properly disable access when a password has not been set for vtys, which allows remote attackers to obtain access via telnet...
CVE-1999-1316
Passfilt.dll in Windows NT SP2 allows users to create a password that contains the user's name, which could make it easier for an attacker to guess...
CVE-1999-1198
The vulnerability affects the BuildDisk program on NeXT systems prior to 2.0. It fails to prompt for the root password, enabling local users to gain root privileges. Root cause: missing authentication prompt in BuildDisk. Impact: local privilege escalation with complete compromise of the affected...
CVE-2001-0528
The CVE-2001-0528 entry affects Oracle E-Business Suite Release 11i Applications Desktop Integrator (ADI) version 7.x, where a debug version of FNDPUB11I.DLL logs the APPS schema password in cleartext to a debug file. This enables local users to obtain the password and gain privileges. The availa...
CVE-2001-1017
rmuser utility in FreeBSD 4.2 and 4.3 creates a copy of the master.passwd file with world-readable permissions while updating the original file, which could allow local users to gain privileges by reading the copied file while rmuser is running, obtain the password hashes, and crack the passwords...
CVE-1999-1104
Windows 95 uses weak encryption for the password list .pwl file used when password caching is enabled, which allows local users to gain privileges by decrypting the passwords...
CVE-1999-1316: Undefined Security Weakness
Passfilt.dll in Windows NT SP2 allows users to create a password that contains the user's name, which could make it easier for an attacker to guess...
CVE-2001-1039
The CVE describes a vulnerability in the JetAdmin web interface for HP JetDirect where the telnet interface password is not set after the admin password is changed. This allows remote attackers to gain access to the printer over the network (attack vector: network, low complexity). The available ...
CVE-2001-0911
CVE-2001-0911 affects PHP-Nuke 5.1, where user and administrator passwords are stored in a base-64 encoded cookie. This could allow remote attackers to gain privileges by stealing/sniffing the cookie and decoding it. The connected sources corroborate the cookie-based credential exposure, but no p...
CVE-2001-0967
Knox Arkeia server (notably version 4.2) uses a constant salt when hashing passwords via crypt(), enabling easier brute‑force guessing. The root cause is the non‑unique salt value in password encryption, which compromises password strength. The PT-2001-2119 advisory aligns with this, describing t...
Несанкционированный доступ через kerberos5 su (unauthorized access)
При логине root не требуется пароль...
CVE-2001-1497
Microsoft Internet Explorer 4.0 through 6.0 could allow local users to differentiate between alphanumeric and non-alphanumeric characters used in a password by pressing certain control keys that jump between non-alphanumeric characters, which makes it easier to conduct a brute-force password...