Default Password (alpine) for 'root' Account

The account 'root' on the remote host has the password 'alpine'. An attacker may leverage this issue to gain full access to the affected system. Note that iPhones are known to use these credentials by default and allow access via SSH when jailbroken. %NASLMINLEVEL 70300 C Tenable Network Security...

Random password for 'root' account

Nessus was able to login to the remote host as 'root' via SSH with a random password. A remote attacker can exploit this to gain access to the affected host, possibly at an administrative level. This may be due to a known issue with some versions of Ubuntu's libpam-runtime package when used in a...

Test Join combined dictionary to crack a Linux password-vulnerability warning-the black bar safety net

The test environment, the RHEL5 system, The system root account a self-built account icnpunk one. root@localhost run ./ unshadow /etc/passwd /etc/shadow /tmp/passwd root@localhost run vim /tmp/passwd Delete not used rows, leaving only the need to hack the account:...

DD-WRT HTTP v24-SP1 - Command Injection

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'DD-WRT HTTP...

xscreensaver 5.01 Arbitrary File Disclosure Symlink Attack Vulnerability

Exploit for multiple platform in category local exploits ======================================================================== xscreensaver 5.01 Arbitrary File Disclosure Symlink Attack Vulnerability ======================================================================== xscreensaver local...

xscreensaver 5.01 - Arbitrary File Disclosure Symlink

xscreensaver 5.01 - Arbitrary File Disclosure Symlink xscreensaver local arbitrary file disclosure | symlink attack The �xscreensaver� program distributed normally with Xorg can be abused to disclose local files owned by other users also of the root account. Xscreensaver has the setuid bit on...

Fedora Core 9 FEDORA-2009-4044 (prelude-manager)

The remote host is missing an update to prelude-manager announced via advisory FEDORA-2009-4044. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright...

Fedora Core 10 FEDORA-2009-3931 (prelude-manager)

The remote host is missing an update to prelude-manager announced via advisory FEDORA-2009-3931. OpenVAS Vulnerability Test $Id: fcore20093931.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-3931 prelude-manager Authors: Thomas Reinke Copyright:...

Fedora 10 : prelude-manager-0.9.14.2-2.fc10 (2009-3931)

The configuration file of prelude-manager contains a database password and is world readable. This update restricts permissions to the root account. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted t...

Sendmail 'smad' Vulnerability

The remote host is subject to the SPDX-FileCopyrightText: 2009 Vlatko Kosturjak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later CPE = "cpe:/a:sendmail:sendmail"; ifdescription...

Default Password (toor) for 'root' Account

The account 'root' on the remote host has the password 'toor'. An attacker may leverage this issue to gain total control of the affected system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "root"; password = "toor"; include'deprecatednasllevel.inc'; include'compat.inc'; if...

Design/Logic Flaw

The 1 python-vm-builder and 2 ubuntu-vm-builder implementations in VMBuilder 0.9 in Ubuntu 8.10 omit the -e option when invoking chpasswd with a root:! argument, which configures the root account with a cleartext password of ! exclamation point and allows attackers to bypass intended login...

Default Password (testpass123) for 'root' Account

The account 'root' on the remote host has the password 'testpass123'. An attacker may leverage this to gain total control of the affected system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "root"; password = "testpass123"; include'deprecatednasllevel.inc'; include'compat.inc';...

Provide the right to use a skills-vulnerability warning-the black bar safety net

Author: xi4oyu A linux mention of the right to use the tips, release to full when looking for a job to save RP. OK, under normal circumstances, we in the implementation of the bash script, there is an implementation process in which there is a little more important:if BASHENV is set, it will...

CVE-2008-2940

The alert-mailing implementation in HP Linux Imaging and Printing HPLIP 1.6.7 allows local users to gain privileges and send e-mail messages from the root account via vectors related to the setalerts message, and lack of validation of the device URI associated with an event message...

Information disclosure

The alert-mailing implementation in HP Linux Imaging and Printing HPLIP 1.6.7 allows local users to gain privileges and send e-mail messages from the root account via vectors related to the setalerts message, and lack of validation of the device URI associated with an event message...

CVE-2008-2940

The alert-mailing implementation in HP Linux Imaging and Printing HPLIP 1.6.7 allows local users to gain privileges and send e-mail messages from the root account via vectors related to the setalerts message, and lack of validation of the device URI associated with an event message...

Default Password (dottie) for 'root' Account

The account 'root' has the password 'dottie'. An attacker may use this to gain further privileges on this system %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "root"; password = "dottie"; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid31800;...

CVE-2008-1542

Airspan Base Station Distribution Unit BSDU has "topsecret" as its password for the root account, which allows remote attackers to obtain administrative access via a telnet login, a different vulnerability than CVE-2008-1262...

Promise NAS NS4300N GUI bug

List, There is a bug in the Promise NAS NS4300N web GUI firmware version 1.1.0.5 which allows an authenticated admin user to change the password of the 'root' account. The user management portion of the web interface allows the admin user to change user's passwords. The PHP script that handles th...