1146 matches found
CVE-2001-0157
Palm OS 3.5.2 and earlier is affected by a debugging utility in the backdoor mode that lets an attacker with physical access bypass access restrictions and obtain passwords despite a lockout mechanism. The available sources do not specify a patch or remediation steps. Exploit specifics are not pr...
CVE-2001-0178
CVE-2001-0178 affects KDE2’s kdesu: the keep-password feature uses a UNIX socket to pass authentication data, but KDE2 (before 2.2.0-6) does not verify the socket listener’s identity. This can allow local users to obtain root passwords and gain privileges. Multiple advisories confirm the issue an...
Ultimate Bulletin Board
Here is a message I just popped off to infopop about their Ultimate Bulletin Board v5 product. It's not really meant for someone not used to their product. -------------------------------------------------------------------------------- If a user has info stored in a cookie, replies to a message...
CVE-1999-0359
ptylogin in Unix systems allows users to perform a denial of service by locking out modems, dial out with that modem, or obtain passwords...
CVE-2001-0103
CoffeeCup Direct and Free FTP clients uses weak encryption to store passwords in the FTPServers.ini file, which could allow attackers to easily decrypt the passwords...
mysqld log file
Tested on Red Hat 7.0: narrow@tornado /$ cat /var/log/mysqld.log | grep "Password=PASSWORD" 001225 21:08:18 7 Query UPDATE user SET Password=PASSWORD'rewt' WHERE user='root' narrow@tornado /$ Here we have the password for user 'root'. -- Narrow - [email protected] - http://www.zone.ee/unix/ - Esto...
Уязвимость локальной защиты в MDaemon
Локальную функцию блокировки программы паролем можно легко обойти...
Samba 2.0.7 SWAT vulnerabilities
the original writeup can be found at http://www.uberhax0r.net/miah/swat along with all the code mentioned in this advisory The program swat included in the samba distribution allows username and password bruteforcing. An attacker can easily generate userlists and then bruteforce their passwords...
CVE-2000-0164
Sun Internet Mail Server (SIMS) installations create a world-readable file that allows local users to obtain passwords. Affected: SIMS. Issue: world-writable or world-readable file exposure leading to complete confidentiality impact for local users. Root cause and exact file/path are not specifie...
CVE-2000-0754
Vulnerability in HP OpenView Network Node Manager NMM version 6.1 related to passwords...
Проблема в MS Money
Пароль пользователя хранится открытым текстом...
Firewall-1 session agent 3.0 -> 4.1, dictionnary and brute force attack
hi, every session agents from 3.0 to 4.1 4.1 included, all plateforms are vulnerables to a brute force and dictionnary style password attack. while authenticating a user through his port 261, firewall modules send a "331 User:" string to the agent, wait for an answer, and then reply with a "220...
CVE-2000-0589
SawMill 5.0.21 is affected by a weakness in how it stores passwords, enabling an attacker to decrypt the administrative password and modify the SawMill configuration. The vulnerability stems from weak encryption/hash usage, facilitating information disclosure and potential configuration tampering...
CVE-2000-0625
NetZero 3.0 and earlier uses weak encryption for storing a user's login information, which allows a local user to decrypt the password...
CVE-2000-0559
The CVE-2000-0559 entry describes a vulnerability in eTrust Intrusion Detection System (formerly SessionWall-3) where administrative passwords stored in the registry are protected with weak XOR encryption. The underlying issue is the weak encryption implementation, enabling a local attacker to de...
Recovering Passwords in Visible Systems' Razor
|-------------- RECOVERING PASSWORDS IN VISIBLE SYSTEMS' RAZOR ---------------| |--------------------------------------------------------------------------- --| |-------------------- Shawn Clifford [email protected] ---------------------| This advisory follows the RFP disclosure policy:...
Слабое шифрование пароля в Meeting Maker
При передаче пароля по сети используется легко дешифруемый алгорит замены символов Цезаря...
CVE-2000-0326
Meeting Maker uses weak encryption a polyalphabetic substitution cipher for passwords, which allows remote attackers to sniff and decrypt passwords for Meeting Maker accounts...
win2k.install.txt
Hi ! During the installation process of Windows 2000 professionnal anyone can connect to the ADMIN$ share as ADMINISTRATOR whithout any password. Verification : % ./smbclient \\WINDOZE\ADMIN$ -I xxx.yyy.zzz.ttt -U 'administrator' -d 0 -N Unable to open configuration file...