CVE-2005-1098

GetDataBack for NTFS 2.31 stores the username and license key in plaintext in the Name value in the License registry key, which may allow local users to obtain sensitive information...

CVE-2005-0422

DelphiTurk CodeBank aka KodBank 3.1 and earlier stores usernames and passwords in the Codebank registry key, which allows local users to gain privileges...

einstein101.txt

/ Einstein v1.01 Local Password Disclosure Exploit by Kozan Application: Einstein v1.01 and previous versions Procuder: Bfriendly.com Vulnerable Description: Einstein v1.01 discloses passwords to local users. Discovered & Coded by: Kozan Credits to ATmaCA Web: www.netmagister.com Web2:...

CVE-2005-0506

The Avaya IP Office Phone Manager, and other products such as the IP Softphone, stores sensitive data in cleartext in a registry key, which allows local and possibly remote users to steal usernames and passwords and impersonate other users via keys such as Avaya\IP400\Generic...

CVE-2005-0506

CVE-2005-0506 affects the Avaya IP Office Phone Manager and related products (e.g., IP Softphone). The issue is that usernames and passwords are stored in cleartext in a registry key (for example Avaya\IP400\Generic), enabling local and potentially remote users to steal credentials and impersonat...

CVE-2005-0422

DelphiTurk CodeBank aka KodBank 3.1 and earlier stores usernames and passwords in the Codebank registry key, which allows local users to gain privileges...

CVE-1999-0718

The CVE-1999-0718 entries describe IBM GINA used for OS/2 domain authentication of Windows NT users, where local users can gain administrator privileges by changing the GroupMapping registry key. This is the explicit vulnerability mechanism: alteration of GroupMapping to escalate privileges. Conn...

CVE-1999-1397

Index Server 2.0 on IIS 4.0 stores physical path information in the ContentIndex\Catalogs subkey of the AllowedPaths registry key, enabling local and remote users to obtain the physical paths of indexed directories. Affected component: ContentIndex\Catalogs under AllowedPaths. Root cause: registr...

CVE-2002-1117

Technical details for CVE-2002-1117 are not publicly available in the provided connected documents. The available descriptions reiterate the issue regarding RestrictAnonymous, but no affected products/versions or fixes are specified here. Monitor for updates.

CVE-1999-0718

IBM GINA, when used for OS/2 domain authentication of Windows NT users, allows local users to gain administrator privileges by changing the GroupMapping registry key...

Trend Micro Office Scan weak permissions

Full access is given to Everyone group for installation directory and registry key...

TOCTOU with NT System Service Hooking

TOCTOU Time-Of-Check-to-Time-Of-Use problem is known for a while 1. Nevertheless such bugs are still not uncommon. That is more or less acceptable for general software but not for security products. I believe there are drivers that hook kernel system services by well known technique 2,3,4. Those...

Microsoft Windows SMB Registry : NT MTS Package Administration Registry Key Permission Weakness

The registry key HKLM\SOFTWARE\Microsoft\Transaction Server\Packages can be modified by users not in the admin group. Write access to this key allows an unprivileged user to gain additional privileges. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11867;...

Microsoft Windows SMB Registry : SNMP Registry Key Permission Weakness Local Privilege Escalation

The registry key HKLM\SYSTEM\CurrentControlSet\Services\SNMP\Parameters can be modified by users who are not in the admin group. Write access to this key allows an unprivileged user to gain additional privileges. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11868;...

UPnP TCP Helper Detection

The remote host is running Microsoft UPnP TCP helper. If the tested network is not a home network, you should disable this service. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11765; scriptversion"1.19"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"UPnP TCP...

CVE-2002-0642

CVE-2002-0642 corresponds to an elevation-of-privilege issue in Microsoft SQL Server 2000 and MSDE 2000 caused by insecure permissions on the registry key that stores the SQL Server service account. The OpenVAS/SECURITYVULNS entries corroborate a privilege-escalation risk tied to the SQL Server s...

CVE-2002-0642

The registry key containing the SQL Server service account information in Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine MSDE 2000, has insecure permissions, which allows local users to gain privileges, aka "Incorrect Permission on SQL Server Service Account Registry Key...

Microsoft Windows SMB Registry : Classic Logon Screen

The registry key HKLM\Software\Microsoft\Windows NT\CurrentVersion\WinLogon\LogonType is set to 1. It means that users who attempt to log in locally will see get the 'new' WindowsXP logon screen which displays the list of users of the remote host. C Tenable Network Security, Inc...

Microsoft Windows SMB Registry : Last Logged User Name Disclosure

The registry key HKLM\Software\Microsoft\Windows NT\WinLogon\DontDisplayLastUserName is not set to 1. It means that users who attempt to log in locally will see the name of the last user who logged in successfully in this computer on the screen. C Tenable Network Security, Inc. include"compat.inc...

Microsoft Windows SMB Registry : Dial-In Enabled

Dial-in access is enabled on the remote Windows host. Provided a modem is installed, attackers may be able to dial into this host, bypassing firewall restrictions, and gaining access to the internal network. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11458;...