CVE-2003-0881

The vulnerability (CVE-2003-0881) affects Mac OS X prior to 10.3 when configured for MD5 Challenge Response. If the CRAM-MD5 hashed login fails, the system uses plaintext authentication, potentially allowing remote attackers to sniff the password and gain privileges. The connected documents provi...

CVE-2003-0670

Sustworks IPNetSentryX and IPNetMonitorX allow local users to sniff network packets via the setuid helper applications 1 RunTCPDump, which calls tcpdump, and 2 RunTCPFlow, which calls tcpflow...

CVE-2003-0670

Sustworks IPNetSentryX and IPNetMonitorX are affected. The setuid helper applications RunTCPDump (invokes tcpdump) and RunTCPFlow (invokes tcpflow) allow local users to sniff network packets, exposing partial confidentiality. Root cause is the presence of setuid wrappers enabling packet capture. ...

CVE-2003-0670

Sustworks IPNetSentryX and IPNetMonitorX allow local users to sniff network packets via the setuid helper applications 1 RunTCPDump, which calls tcpdump, and 2 RunTCPFlow, which calls tcpflow...

MacOS X privilege escalation

Network traffic sniffing via IPNetMonitorX, format string bug in PNetSentryX...

CVE-2003-0270

The administration capability for Apple AirPort 802.11 wireless access point devices uses weak encryption XOR with a fixed key for protecting authentication credentials, which could allow remote attackers to obtain administrative access via sniffing when the capability is available via Ethernet o...

Linux Kernel IP Stack ICMP Error Response Arbitrary Memory Information Disclosure

The remote host is vulnerable to an 'icmp leak' of potentially confidential data. That is, when the host generates an ICMP error packet other than 'destination unreachable', the error packet is supposed to only contain the original message or a portion of the original message. Due to a bug in the...

Mac OS X LDAP plugins transmit user credentials in clear text

Overview Versions 10.2 and later of Apple's MacOS X operating system include support for the Lightweight Directory Access Protocol LDAP. A vulnerability in the way some of these versions of MacOS X handle authentication in certain environments could expose user's passwords in plaintext as they're...

CVE-2003-0270

The administration capability for Apple AirPort 802.11 wireless access point devices uses weak encryption XOR with a fixed key for protecting authentication credentials, which could allow remote attackers to obtain administrative access via sniffing when the capability is available via Ethernet o...

CVE-2003-0270

Apple AirPort Base Station (802.11) is affected by CVE-2003-0270. The administrative protocol on TCP 5009 uses XOR with a fixed key to protect credentials, allowing an attacker that can sniff traffic over Ethernet or non-WEP wireless to obtain administrative access. The flaw impacts confidentiali...

CVE-2003-0219

Kerio Personal Firewall KPF 2.1.4 and earlier allows remote attackers to execute administrator commands by sniffing packets from a valid session and replaying them against the remote administration server...

Apple AirPort Base Station Authentication Credential Encryption Weakness

The remote host is an Apple Airport Wireless Access Point which can be administrated on top of TCP port 5009. There is a design flaw in the administrative protocol which makes the clients which connect to this port send the password in cleartext although slightly obsfuscated. An attacker who has...

AudixShell.txt

This vulnerability is dedicated to my mother, who passed away on April 7, 2003. Mom, may God be with you. Avaya, a manufacturer of telecommunications products, makes a voicemail system called Intuity Audix. This system is based on a Novell licensed version of Unixware v2.1.3 by SCO. The one used...

Network Chemistry Wireless Sensor Detection

The remote host is a WSP100 802.11b Remote Sensor from Network Chemistry. This device sniffs data flowing on the channels used by 802.11b and forwards it to any host which 'subscribes' to this device. An attacker may use this device to sniff 802.11b networks of the area it is deployed from any...

CVE-2003-0219

Kerio Personal Firewall KPF 2.1.4 and earlier allows remote attackers to execute administrator commands by sniffing packets from a valid session and replaying them against the remote administration server...

Weak Encryption Scheme in Telindus 112x

----------------------------------------------------------------------- Product Name: TELINDUS ADSL ROUTER 112x Severity : Low Risk Remote : No Category : Trivial encryption scheme can reveal router system password Exploit : No Vendor URL : http://www.telindus.com Author : Elia Florio Discov.-Dat...

CVE-2002-1746

Vtun 2.5b1 allows remote attackers to inject data into user sessions by sniffing and replaying packets...

CVE-2002-2326

The default configuration of Mail.app in Mac OS X 10.0 through 10.0.4 and 10.1 through 10.1.5 sends iDisk authentication credentials in cleartext when connecting to Mac.com, which could allow remote attackers to obtain passwords by sniffing network traffic...

CVE-2002-1976

ifconfig, when used on the Linux kernel 2.2 and later, does not report when the network interface is in promiscuous mode if it was put in promiscuous mode using PACKETMRPROMISC, which could allow attackers to sniff the network without detection, as demonstrated using libpcap...

CVE-2002-1976

ifconfig, when used on the Linux kernel 2.2 and later, does not report when the network interface is in promiscuous mode if it was put in promiscuous mode using PACKETMRPROMISC, which could allow attackers to sniff the network without detection, as demonstrated using libpcap...