Sun iPlanet Messaging Server 5.2 HotFix 1.16 - Root Password Disclosure

Sun iPlanet Messaging Server 5.2 HotFix 1.16 - Root Password Disclosure Date: 14 Jun 2006 Vendor: Sun Microsystems, Inc. Name: iPlanet Messaging Server Version: 5.2 HotFix 1.16 built May 14 2003 Vuln: msg.conf symlink attack Severity: high Software description ---------------- The iPlanet Messagi...

CVE-2006-2452

GNOME GDM 2.8, 2.12, 2.14, and 2.15, when the "face browser" feature is enabled, allows local users to access the "Configure Login Manager" functionality using their own password instead of the root password, which can be leveraged to gain additional privileges...

CVE-2006-2452

GNOME GDM 2.8, 2.12, 2.14, and 2.15, when the "face browser" feature is enabled, allows local users to access the "Configure Login Manager" functionality using their own password instead of the root password, which can be leveraged to gain additional privileges...

Default credentials

MySQL Manager in Apple Mac OS X 10.3.9 and 10.4.6, when setting up a new MySQL database server, does not use the "New MySQL root password" that is provided, which causes the MySQL root password to be blank and allows local users to gain full privileges to that database...

CVE-2006-0146

The server.php test script in ADOdb for PHP before 4.70, as used in multiple products including 1 Mantis, 2 PostNuke, 3 Moodle, 4 Cacti, 5 Xaraya, 6 PHPOpenChat, 7 MAXdev MD-Pro, and 8 MediaBeez, when the MySQL root password is empty, allows remote attackers to execute arbitrary SQL commands via...

CVE-2004-2313: Undefined Security Weakness

Inter7 SqWebMail 3.4.1 through 3.6.1 generates different error messages for incorrect passwords versus correct passwords on non-mail-enabled accounts such as root, which allows remote attackers to guess the root password via brute force attacks...

CVE-2002-1809

The default configuration of the Windows binary release of MySQL 3.23.2 through 3.23.52 has a NULL root password, which could allow remote attackers to gain unauthorized root access to the MySQL database...

CVE-2002-1809: Undefined Security Weakness

The default configuration of the Windows binary release of MySQL 3.23.2 through 3.23.52 has a NULL root password, which could allow remote attackers to gain unauthorized root access to the MySQL database...

CVE-2004-2004: Undefined Security Weakness

The Live CD in SUSE LINUX 9.1 Personal edition is configured without a password for root, which allows remote attackers to gain privileges via SSH...

Exploit Labs Security Advisory 2005.2

------------------------------------------------------------ - EXPL-A-2005-002 exploitlabs.com Advisory 031 - ------------------------------------------------------------ - Samsung ADSL Modem - AFFECTED PRODUCTS ================= Samsung ADSL Modem Samgsung Eletronics http://www.samsung.com DETAI...

Knox Arkeia Network Backup multiple vulnerabilities

Database files and password file have weak security premossions by default. Default root password is empty. Buffer overflow...

CVE-2005-0427: Undefined Security Weakness

The ebuild of Webmin before 1.170-r3 on Gentoo Linux includes the encrypted root password in the miniserv.users file when building a tbz2 of the webmin package, which allows remote attackers to obtain and possibly crack the encrypted password...

CVE-2004-2004

The Live CD in SUSE LINUX 9.1 Personal edition is configured without a password for root, which allows remote attackers to gain privileges via SSH...

[Full-Disclosure] Confixx 2.0.xx SQL_Injections and reading MySQL Root-PW

SQL-Injections in Confixx 2.0.xx // reading MySQL Root-PW include"auth.php"; dbconnect$dbhost, $dbuser, $dbpass; $id = dbquery"select countdatenbank as mysql from mysqldatenbanken where kunde = '$PHPAUTHUSER'"; $werte = dbfetcharray$id; $mysql = $werte"mysql"; $id = dbquery"select dbname from...

CVE-2002-1440

The Gateway GS-400 server has a default root password of "0001n" that can not be changed via the administrative interface, which can allow attackers to gain root privileges...

CVE-2002-1440

CVE-2002-1440 : The Gateway GS-400 server ships with a default root password “0001n” that cannot be changed via the administrative interface, enabling an attacker to obtain root privileges. The available documents confirm the existence of this default credential and the associated privilege escal...

CVE-2002-1440

The Gateway GS-400 server has a default root password of "0001n" that can not be changed via the administrative interface, which can allow attackers to gain root privileges...

CVE-2002-1440: Undefined Security Weakness

The Gateway GS-400 server has a default root password of "0001n" that can not be changed via the administrative interface, which can allow attackers to gain root privileges...

CVE-2002-1809

The default configuration of the Windows binary release of MySQL 3.23.2 through 3.23.52 has a NULL root password, which could allow remote attackers to gain unauthorized root access to the MySQL database...

MySQL 3.20.323.22.x3.23.x - Null Root Password Weak Default Configuration (2)

MySQL 3.20.323.22.x3.23.x - Null Root Password Weak Default Configuration 2 / source: https://www.securityfocus.com/bid/5503/info MySQL is is an open source relational database project, and is available for a number of operating systems, including Microsoft Windows. A weak default configuration...