CVE-2001-0133: Undefined Security Weakness

The web administration interface for Interscan VirusWall 3.6.x and earlier does not use encryption, which could allow remote attackers to obtain the administrator password to sniff the administrator password via the setpasswd.cgi program or other HTTP GET requests that contain base64 encoded...

CVE-2000-1060

The CVE-2000-1060 entry describes a vulnerability in XFCE 3.5.1 where the default xinitrc configuration runs xhost + localhost, bypassing Xauthority access control. This local-privilege issue allows nearby users to sniff X11 traffic and potentially escalate privileges. The root cause is the insec...

CVE-2000-1169: Undefined Security Weakness

OpenSSH SSH client before 2.3.0 does not properly disable X11 or agent forwarding, which could allow a malicious SSH server to gain access to the X11 display and sniff X11 events, or gain access to the ssh-agent...

CVE-2000-1060: Undefined Security Weakness

The default configuration of XFCE 3.5.1 bypasses the Xauthority access control mechanism with an "xhost + localhost" command in the xinitrc program, which allows local users to sniff X Windows traffic and gain privileges...

CVE-2000-1173

Microsys CyberPatrol uses weak encryption trivial encoding for credit card numbers and uses no encryption for the remainder of the information during registration, which could allow attackers to sniff network traffic and obtain this sensitive information...

CVE-2000-1158

NAI Sniffer Agent uses base64 encoding for authentication, which allows attackers to sniff the network and easily decrypt usernames and passwords...

CVE-2000-1158

NAI Sniffer Agent uses base64 encoding for authentication, which allows attackers to sniff the network and easily decrypt usernames and passwords...

CVE-2000-1158

The CVE-2000-1158 entry concerns NAI Sniffer Agent that uses base64 encoding for authentication, enabling an attacker to sniff network traffic and potentially recover usernames and passwords. The NVD records a high base score (7.5) with network attack vector and low attack complexity, and confide...

CVE-2000-1173

Microsys CyberPatrol uses weak encryption trivial encoding for credit card numbers and uses no encryption for the remainder of the information during registration, which could allow attackers to sniff network traffic and obtain this sensitive information...

CVE-2000-1173: Undefined Security Weakness

Microsys CyberPatrol uses weak encryption trivial encoding for credit card numbers and uses no encryption for the remainder of the information during registration, which could allow attackers to sniff network traffic and obtain this sensitive information...

CVE-2000-1158: Undefined Security Weakness

NAI Sniffer Agent uses base64 encoding for authentication, which allows attackers to sniff the network and easily decrypt usernames and passwords...

CVE-2000-0378

The pamconsole PAM module in Linux systems performs a chown on various devices upon a user login, but an open file descriptor for those devices can be maintained after the user logs out, which allows that user to sniff activity on these devices when subsequent users log in...

CVE-2000-0378

The vulnerability CVE-2000-0378 affects the pam_console PAM module in Linux systems. It arises because the module performs a chown on various devices at user login, and an open file descriptor for those devices can remain open after logout. This allows the user to sniff activity on those devices ...

CVE-2000-0378: Undefined Security Weakness

The pamconsole PAM module in Linux systems performs a chown on various devices upon a user login, but an open file descriptor for those devices can be maintained after the user logs out, which allows that user to sniff activity on these devices when subsequent users log in...

Remote Root Compromise On All RapidStream VPN Appliances

Date: 8-14-00 Time: 12:40p PST / You have been infected by the Bubonic Loki / OVERVIEW RapidStream has hard-coded the 'rsadmin' account into the sshd binary in the appliance OS. The account has been given a 'null' password in which password assignment and authentication was expected to be handled...

rapidstream.vpn.txt

Date: 8-14-00 Time: 12:40p PST OVERVIEW RapidStream has hard-coded the 'rsadmin' account into the sshd binary in the appliance OS. The account has been given a 'null' password in which password assignment and authentication was expected to be handled by the RapidStream software itself. The vendor...

NT admin password change algorithms expose user plaintext passwords

eye-catching subject line, huh? well, under specific circumstances, unfortunately, it's true. as it's now early morning, i shall be reasonably brief. conditions required if using NTLMv1 LmCompatibilibyLevel=0: - NT admin runs USRMGR.EXE or SRVMGR.EXE and either adds a new user, workstation or...

CVE-2000-0326

Meeting Maker uses weak encryption a polyalphabetic substitution cipher for passwords, which allows remote attackers to sniff and decrypt passwords for Meeting Maker accounts...

CVE-2000-0326: Undefined Security Weakness

Meeting Maker uses weak encryption a polyalphabetic substitution cipher for passwords, which allows remote attackers to sniff and decrypt passwords for Meeting Maker accounts...

CVE-2000-0378

The pamconsole PAM module in Linux systems performs a chown on various devices upon a user login, but an open file descriptor for those devices can be maintained after the user logs out, which allows that user to sniff activity on these devices when subsequent users log in...