promise-root.txt

List, There is a bug in the Promise NAS NS4300N web GUI firmware version 1.1.0.5 which allows an authenticated admin user to change the password of the 'root' account. The user management portion of the web interface allows the admin user to change user's passwords. The PHP script that handles th...

DSA-1177-1 usermin

Bulletin has no description...

Opsware Network Automation System weak permissions

/etc/init.d/mysqll init script contains MySQL 'root' account password in cleartext...

Design/Logic Flaw

opiepasswd in One-Time Passwords in Everything OPIE in FreeBSD 4.10-RELEASE-p22 through 6.1-STABLE before 20060322 uses the getlogin function to determine the invoking user account, which might allow local users to configure OPIE access to the root account and possibly gain root privileges if a...

CVE-2006-1283

opiepasswd in One-Time Passwords in Everything OPIE in FreeBSD 4.10-RELEASE-p22 through 6.1-STABLE before 20060322 uses the getlogin function to determine the invoking user account, which might allow local users to configure OPIE access to the root account and possibly gain root privileges if a...

Shiva LanRover Blank Password

The Shiva LanRover has no password set for the root user account. An attacker is able to telnet to this system and gain access to any phone lines attached to this device. Additionally, the LanRover can be used as a relay point for further attacks via the telnet and rlogin functionality available...

Shiva LanRover Blank Password (Telnet)

The Shiva LanRover has no password set for the root user account. SPDX-FileCopyrightText: 2005 Digital Defense Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-153-1: fetchmail vulnerability

Ross Boylan discovered a remote buffer overflow in fetchmail. By sending invalid responses with very long UIDs, a faulty or malicious POP server could crash fetchmail or execute arbitrary code with the privileges of the user invoking fetchmail. fetchmail is commonly run as root to fetch mail for...

CVE-2004-0924

NetInfo Manager on Mac OS X 10.3.x through 10.3.5, after an initial root login, reports the root account as being disabled, even when it has not...

Default Password (12345678) for 'root' Account on MacOS X Server

Nessus was able to login to the remote host using the following credentials : Username : root Password : 12345678 On older Macintosh computers, Mac OS X server is configured with this default account on newer computers, the serial number of the system is used instead. C Tenable Network Security,...

MySQL privelege escalation

By spoofing datadir/my.cnf with SELECT INTO it's possible to launch MySQL with any account, including root...

Default Password (D13hh[) for 'root' Account

The account 'root' has the password 'D13hh'. An attacker may use it to gain further privileges on this system. The presence of this account suggests the system may have the D13HH rootkit typically found on Solaris systems. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "root";...

Default Password (D13HH[) for 'root' Account

The account 'root' has the password 'D13HH'. An attacker may use this to gain further privileges on this system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "root"; password = "D13HH"; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid11261;...

Default Password (root) for 'root' Account

The account 'root' on the remote host has the password 'root'. An attacker may leverage this issue to gain total control of the affected system. Note that, while SKIDATA Freemotion.Gate controllers are known to use these credentials, this plugin reports any time it finds a host using these...

Default Password (wh00t!) for 'root' Account

The account 'root' has the password 'wh00t!'. An attacker may use this to gain further privileges on this system. This account suggests that the Wh00t Rootkit may be present on the system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "root"; password = "wh00t!";...

Unpassworded 'root' Account

The account 'root' has no password set. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "root"; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid11245; scriptversion"1.32"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/04/11";...

Aladdin Ghostscript creates insecure temporary files allowing a local user to create symbolic links to other files

Overview Alladin Ghostscript, a previewer for postscript files, creates temporary files with a predictable names. The creation allows attackers to use symbolic links to overwrite other files on the host. Description Alladin Ghostscript is a previewer for postscript files. It creates temporary fil...

SSHD-1 Logging Vulnerability

Crimelabs, Inc. www.crimelabs.net Security Note Crimelabs Security Note CLABS200101 Title: SSH-1 Brute Force Password Vulnerability Date: 5 February, 2001 Vendors: Any supported by SSH-1 Versions: At least ssh-1.2.27 and 1.2.30 Not Affected: OpenSSH Severity: Medium to High Author: Jose Nazario...

vixie-cron - Local Privilege Escalation

!/bin/sh echo '.-------------------------------------------------------------------------.' echo '| Marchew Hyperreal Industries ................... |' echo "| ...well, it is just me, but it is more elite to speak as a group... |" echo "--------------------------------- presents...

Shiva Access Manager 5.0.0 Plaintext LDAP root password.

In testing Intel's Shiva Access Manager RADIUS/Tacacs+ product, i recently came across an important security hole in the LDAP connectivity on the Solaris platform version of this product. When you configure the S.A.M. to store all of it's information in an LDAP directory, it asks that you give it...