Sendmail 'smad' Vulnerability

The remote host is subject to the SPDX-FileCopyrightText: 2009 Vlatko Kosturjak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later CPE = "cpe:/a:sendmail:sendmail"; ifdescription...

Default Password (toor) for 'root' Account

The account 'root' on the remote host has the password 'toor'. An attacker may leverage this issue to gain total control of the affected system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "root"; password = "toor"; include'deprecatednasllevel.inc'; include'compat.inc'; if...

Design/Logic Flaw

The 1 python-vm-builder and 2 ubuntu-vm-builder implementations in VMBuilder 0.9 in Ubuntu 8.10 omit the -e option when invoking chpasswd with a root:! argument, which configures the root account with a cleartext password of ! exclamation point and allows attackers to bypass intended login...

Default Password (testpass123) for 'root' Account

The account 'root' on the remote host has the password 'testpass123'. An attacker may leverage this to gain total control of the affected system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "root"; password = "testpass123"; include'deprecatednasllevel.inc'; include'compat.inc';...

Provide the right to use a skills-vulnerability warning-the black bar safety net

Author: xi4oyu A linux mention of the right to use the tips, release to full when looking for a job to save RP. OK, under normal circumstances, we in the implementation of the bash script, there is an implementation process in which there is a little more important:if BASHENV is set, it will...

Information disclosure

The alert-mailing implementation in HP Linux Imaging and Printing HPLIP 1.6.7 allows local users to gain privileges and send e-mail messages from the root account via vectors related to the setalerts message, and lack of validation of the device URI associated with an event message...

CVE-2008-2940

The alert-mailing implementation in HP Linux Imaging and Printing HPLIP 1.6.7 allows local users to gain privileges and send e-mail messages from the root account via vectors related to the setalerts message, and lack of validation of the device URI associated with an event message...

CVE-2008-2940

The alert-mailing implementation in HP Linux Imaging and Printing HPLIP 1.6.7 allows local users to gain privileges and send e-mail messages from the root account via vectors related to the setalerts message, and lack of validation of the device URI associated with an event message...

CVE-2008-2940: Undefined Security Weakness

The alert-mailing implementation in HP Linux Imaging and Printing HPLIP 1.6.7 allows local users to gain privileges and send e-mail messages from the root account via vectors related to the setalerts message, and lack of validation of the device URI associated with an event message...

Default Password (dottie) for 'root' Account

The account 'root' has the password 'dottie'. An attacker may use this to gain further privileges on this system %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "root"; password = "dottie"; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid31800;...

CVE-2008-1542

Airspan Base Station Distribution Unit BSDU has "topsecret" as its password for the root account, which allows remote attackers to obtain administrative access via a telnet login, a different vulnerability than CVE-2008-1262...

CVE-2008-1542: Undefined Security Weakness

Airspan Base Station Distribution Unit BSDU has "topsecret" as its password for the root account, which allows remote attackers to obtain administrative access via a telnet login, a different vulnerability than CVE-2008-1262...

Promise NAS NS4300N GUI bug

List, There is a bug in the Promise NAS NS4300N web GUI firmware version 1.1.0.5 which allows an authenticated admin user to change the password of the 'root' account. The user management portion of the web interface allows the admin user to change user's passwords. The PHP script that handles th...

promise-root.txt

List, There is a bug in the Promise NAS NS4300N web GUI firmware version 1.1.0.5 which allows an authenticated admin user to change the password of the 'root' account. The user management portion of the web interface allows the admin user to change user's passwords. The PHP script that handles th...

CVE-2007-2554: Undefined Security Weakness

Associated Press AP Newspower 4.0.1 and earlier uses a default blank password for the MySQL root account, which allows remote attackers to insert or modify news articles via shows.tblscript...

DSA-1177-1 usermin

Bulletin has no description...

Opsware Network Automation System weak permissions

/etc/init.d/mysqll init script contains MySQL 'root' account password in cleartext...

Design/Logic Flaw

opiepasswd in One-Time Passwords in Everything OPIE in FreeBSD 4.10-RELEASE-p22 through 6.1-STABLE before 20060322 uses the getlogin function to determine the invoking user account, which might allow local users to configure OPIE access to the root account and possibly gain root privileges if a...

CVE-2006-1283

opiepasswd in One-Time Passwords in Everything OPIE in FreeBSD 4.10-RELEASE-p22 through 6.1-STABLE before 20060322 uses the getlogin function to determine the invoking user account, which might allow local users to configure OPIE access to the root account and possibly gain root privileges if a...

Shiva LanRover Blank Password

The Shiva LanRover has no password set for the root user account. An attacker is able to telnet to this system and gain access to any phone lines attached to this device. Additionally, the LanRover can be used as a relay point for further attacks via the telnet and rlogin functionality available...