Дырки в Interscan VirusWall for UNIX

Передача паролей открытым текстом или со слабой кодировкой. Кроме того - проблема символьных линков...

DoS против систем с включенным PMTU discovery

Можно прекратить связь между жвумя системами за счет установки некорректного MTU, спровоцировав между системами пакет с известным содержимым например ICMP echo-reply...

Vulnerabilities in Norton Antivirus for Exchange

Norton Antivirus for Exchange NavExchange, a product of Symantec, suffers from two major problems, with impact described below. The system tested was version 1.5. The most recent version is 2.0, which I have not had the opportunity to test, but based on information from Symantec I believe 2.0 is...

RedHat 6.2 - Piranha Virtual Server Package Plaintext Password

source: https://www.securityfocus.com/bid/1367/info Password changes submitted to Red Hat Piranha via HTTP are insecurely passed as variables in a GET request. Unauthorized users could obtain the password by reading the httpd access log or by sniffing. ---------from...

ipx storm

Hello, The IPX protocol has samething called IPX ping. Sending a packet to socket 0x456 to anything supporting ipx causes a response to be sent back. If you send a packet with source and destination addresses set to the ethernet broadcast address and source and destination socket set to 0x456...

Слабое шифрование пароля в Meeting Maker

При передаче пароля по сети используется легко дешифруемый алгорит замены символов Цезаря...

CVE-2000-0220

ZoneAlarm sends sensitive system and network information in cleartext to the Zone Labs server if a user requests more information about an event...

CVE-2000-0220

ZoneAlarm sends sensitive system and network information in cleartext to the Zone Labs server if a user requests more information about an event...

PT-2000-1128 · Openssh +1 · Openssh +1

Name of the Vulnerable Software and Affected Versions: OpenSSH affected versions not specified Description: The issue allows local users without shell access to redirect a TCP connection through a service that uses the standard system password database for authentication, such as POP or FTP...

CVE-2000-0086

Netopia Timbuktu Pro sends user IDs and passwords in cleartext, which allows remote attackers to obtain them via sniffing...

IKE - Aggressive Mode Shared Secret Hash Leakage

IKE - Aggressive Mode Shared Secret Hash Leakage source: https://www.securityfocus.com/bid/7423/info When a VPN is configured to use a pre-shared master secret and a client attempts to negotiate keys in aggressive mode, a hash of the secret is transmitted across the network in clear-text. This ma...

IKE - Aggressive Mode Shared Secret Hash Leakage

source: https://www.securityfocus.com/bid/7423/info When a VPN is configured to use a pre-shared master secret and a client attempts to negotiate keys in aggressive mode, a hash of the secret is transmitted across the network in clear-text. This may result in the hash being leaked to eavesdropper...

rsh Service Detection

The rsh service is running on the remote host. This service is vulnerable since data is passed between the rsh client and server in cleartext. A man-in-the-middle attacker can exploit this to sniff logins and passwords. Also, it may allow poorly authenticated logins without passwords. If the host...

ncftpd.txt

Proof of Concept - Security Advisory 02/16/99 http://poc.csoft.net Released by [email protected] [email protected] --- Affected Program NcFTPd Description FTP server commercial Severity Can port anywhere / spoof Synopsis: NcFTPd is a commercial FTP File Transfer Protocol server, in the NcFTP produc...

CVE-1999-0727

A kernel leak in the OpenBSD kernel allows IPsec packets to be sent unencrypted...

CVE-1999-1526

Auto-update feature of Macromedia Shockwave 7 transmits a user's password and hard disk information back to Macromedia...

PT-1999-1083 · Quakenbush · Quakenbush Nt Password Appraiser

Name of the Vulnerable Software and Affected Versions: Quakenbush NT Password Appraiser demo version Description: The issue concerns the transmission of passwords in plaintext over the network. Recommendations: For the demo version of the Quakenbush NT Password Appraiser, consider disabling the...

PT-1999-1219 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: A network intrusion detection system IDS does not properly handle data within TCP handshake packets. Recommendations: At the moment, there is no information about a newer version th...

Check Point Software Firewall-1 3.01 4.0 - Session Agent Impersonation

Check Point Software Firewall-1 3.01 4.0 - Session Agent Impersonation source: https://www.securityfocus.com/bid/1661/info A vulnerability exists in the "Session Agent" portion of Firewall-1, from Check Point. This vulnerability appears to affect all versions of the session agent prior to the one...

Check Point Software Firewall-1 3.0/1 4.0 - Session Agent Impersonation

source: https://www.securityfocus.com/bid/1661/info A vulnerability exists in the "Session Agent" portion of Firewall-1, from Check Point. This vulnerability appears to affect all versions of the session agent prior to the one shipped in FW-1 4.1. The session agent listens on a Windows 9x or NT b...