708 matches found
Shiva LanRover Blank Password (Telnet)
The Shiva LanRover has no password set for the root user account. SPDX-FileCopyrightText: 2005 Digital Defense Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-153-1: fetchmail vulnerability
Ross Boylan discovered a remote buffer overflow in fetchmail. By sending invalid responses with very long UIDs, a faulty or malicious POP server could crash fetchmail or execute arbitrary code with the privileges of the user invoking fetchmail. fetchmail is commonly run as root to fetch mail for...
CVE-2004-0924
NetInfo Manager on Mac OS X 10.3.x through 10.3.5, after an initial root login, reports the root account as being disabled, even when it has not...
CVE-2004-0924: Undefined Security Weakness
NetInfo Manager on Mac OS X 10.3.x through 10.3.5, after an initial root login, reports the root account as being disabled, even when it has not...
Default Password (12345678) for 'root' Account on MacOS X Server
Nessus was able to login to the remote host using the following credentials : Username : root Password : 12345678 On older Macintosh computers, Mac OS X server is configured with this default account on newer computers, the serial number of the system is used instead. C Tenable Network Security,...
MySQL privelege escalation
By spoofing datadir/my.cnf with SELECT INTO it's possible to launch MySQL with any account, including root...
Default Password (root) for 'root' Account
The account 'root' on the remote host has the password 'root'. An attacker may leverage this issue to gain total control of the affected system. Note that, while SKIDATA Freemotion.Gate controllers are known to use these credentials, this plugin reports any time it finds a host using these...
Default Password (D13HH[) for 'root' Account
The account 'root' has the password 'D13HH'. An attacker may use this to gain further privileges on this system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "root"; password = "D13HH"; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid11261;...
Default Password (wh00t!) for 'root' Account
The account 'root' has the password 'wh00t!'. An attacker may use this to gain further privileges on this system. This account suggests that the Wh00t Rootkit may be present on the system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "root"; password = "wh00t!";...
Default Password (D13hh[) for 'root' Account
The account 'root' has the password 'D13hh'. An attacker may use it to gain further privileges on this system. The presence of this account suggests the system may have the D13HH rootkit typically found on Solaris systems. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "root";...
Unpassworded 'root' Account
The account 'root' has no password set. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "root"; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid11245; scriptversion"1.32"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/04/11";...
Aladdin Ghostscript creates insecure temporary files allowing a local user to create symbolic links to other files
Overview Alladin Ghostscript, a previewer for postscript files, creates temporary files with a predictable names. The creation allows attackers to use symbolic links to overwrite other files on the host. Description Alladin Ghostscript is a previewer for postscript files. It creates temporary fil...
SSHD-1 Logging Vulnerability
Crimelabs, Inc. www.crimelabs.net Security Note Crimelabs Security Note CLABS200101 Title: SSH-1 Brute Force Password Vulnerability Date: 5 February, 2001 Vendors: Any supported by SSH-1 Versions: At least ssh-1.2.27 and 1.2.30 Not Affected: OpenSSH Severity: Medium to High Author: Jose Nazario...
vixie-cron - Local Privilege Escalation
!/bin/sh echo '.-------------------------------------------------------------------------.' echo '| Marchew Hyperreal Industries ................... |' echo "| ...well, it is just me, but it is more elite to speak as a group... |" echo "--------------------------------- presents...
Shiva Access Manager 5.0.0 Plaintext LDAP root password.
In testing Intel's Shiva Access Manager RADIUS/Tacacs+ product, i recently came across an important security hole in the LDAP connectivity on the Solaris platform version of this product. When you configure the S.A.M. to store all of it's information in an LDAP directory, it asks that you give it...
QSSL QNX 4.25 A - 'crypt()' Local Privilege Escalation
/ source: https://www.securityfocus.com/bid/1114/info A design error in the operation of the crypt3 function exists in QNX, from QNX System Software, Limited QSSL. The flaw allows the recovery of passwords from the hashes. On most Unix variants, crypt3 is based on a variant of the DES encryption...
Oracle8i Standard Edition 8.1.5 for Linux Installer - Local Privilege Escalation
source: https://www.securityfocus.com/bid/1035/info A vulnerability exists in the installation program for Oracle 8.1.5i. The Oracle installation scripts will create a directory named /tmp/orainstall, owned by oracle:dba, mode 711. Inside of this directory it will create a shell script named...
Debian 2.1 - apcd Symlink
Debian 2.1 - apcd Symlink source: https://www.securityfocus.com/bid/958/info A vulnerability exists in the apcd package, as shipped in Debian GNU/Linux 2.1. By sending the apcd process a SIGUSR1, a file will be created in /tmp called upsstat. This file contains information about the status of the...
Debian 2.1 - apcd Symlink
source: https://www.securityfocus.com/bid/958/info A vulnerability exists in the apcd package, as shipped in Debian GNU/Linux 2.1. By sending the apcd process a SIGUSR1, a file will be created in /tmp called upsstat. This file contains information about the status of the APC device. This file is...