MySQL 3.23.x/4.0.x - 'COM_CHANGE_USER' Password Length Account

/ source: https://www.securityfocus.com/bid/6373/info A flaw in the password authentication mechanism for MySQL may make it possible for an authenticated database user to compromise the accounts of other database users. The flaw lies in the fact that the server uses a string returned by the clien...

CVE-2002-1190

CVE-2002-1190 : Cisco Unity 2.x and 3.x are affected by use of well-known default user accounts, which could allow remote attackers to gain access and place arbitrary calls. The available sources state this description without detailing exact affected versions beyond the 2.x/3.x range or any spec...

popper_mod 1.2.1 and previous accounts compromise

description: poppermod is a free, full featured web based POP3 email client written in PHP. It is an extension of the now abandoned "popper" project. It can be downloaded from http://www.symatec-computer.com/forums/ bug report: poppermod 1.2.1 relied on administrators using htaccess authenticatio...

Microsoft Windows - Local Users Information : Automatically Disabled Accounts

Using the supplied credentials, Nessus was able to list local user accounts that have been automatically disabled. These accounts may have been disabled for security reasons or due to brute-force attack attempts. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10911;...

Microsoft Windows - Local Users Information : Disabled Accounts

Using the supplied credentials, Nessus was able to list local user accounts that have been disabled. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10913; scriptversion"1.19"; scriptcvsdate"Date: 2018/08/13 14:32:39"; scriptnameenglish:"Microsoft Windows - Local User...

Microsoft Windows - Users Information : Disabled Accounts

Using the supplied credentials, Nessus was able to list user accounts that have been disabled. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10897; scriptversion"1.19"; scriptcvsdate"Date: 2018/08/13 14:32:39"; scriptnameenglish:"Microsoft Windows - Users Informatio...

Microsoft Windows - Users Information : Automatically Disabled Accounts

Using the supplied credentials, Nessus was able to list user accounts that have been automatically disabled. These accounts may have been disabled for security reasons or due to brute-force attack attempts. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10895;...

Microsoft Windows 'Account Operators' Group User List

Using the supplied credentials, it is possible to extract the member list of the 'Account Operators' group. Members of this group can create or modify local user accounts but can not modify or create administrative accounts or edit user rights. C Tenable Network Security, Inc. include"compat.inc"...

FreeBSD-SA-02:14.pam-pgsql

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-02:14 Security Advisory FreeBSD, Inc. Topic: pam-pgsql port authentication bypass Category: ports Module: pam-pgsql Announced: 2002-03-12 Credits: Jacques A. Vidrine Affects...

Учетные записи miramail в открытом тексте (weak encryption)

Учетные записи пользователей хранятся в открытом тексте...

PT-2001-2573 · Opie · One-Time Passwords In Everything

Name of the Vulnerable Software and Affected Versions: One-Time Passwords In Everything a.k.a OPIE versions 2.32 through 2.4 Description: The issue allows remote attackers to determine the existence of user accounts. This is achieved by the system printing random passphrases if the user account...

Доступ к пользовательским учетным записям в CentraOne (information leakage)

Учетный записи пользователей содержатся в открытом на чтение лог-файле...

CVE-2001-1280

POP3 Server for Ipswitch IMail 7.04 and earlier generates different responses to valid and invalid user names, which allows remote attackers to determine users on the system...

Amtote Homebet - Account Information Brute Force

Amtote Homebet - Account Information Brute Force source: https://www.securityfocus.com/bid/3371/info Homebet is an internet based betting application that is developed by Amtote International. A vulnerability exists in Homebet which could enable a non-registered user to confirm the validity of...

CVE-2001-0347

Information disclosure vulnerability in Microsoft Windows 2000 telnet service allows remote attackers to determine the existence of user accounts such as Guest, or log in to the server without specifying the domain name, via a malformed userid...

CVE-2001-0347

Information disclosure vulnerability in Microsoft Windows 2000 telnet service allows remote attackers to determine the existence of user accounts such as Guest, or log in to the server without specifying the domain name, via a malformed userid...

CVE-2001-0001

cookiedecode function in PHP-Nuke 4.4 allows users to bypass authentication and gain access to other user accounts by extracting the authentication information from a cookie...

Solaris 2.67.0 - IN.FTPD CWD Username Enumeration

Solaris 2.67.0 - IN.FTPD CWD Username Enumeration source: https://www.securityfocus.com/bid/2564/info Solaris is the variant of the UNIX Operating System distributed by Sun Microsystems. Solaris is a versatile operating system designed for use with machines as small as desktop systems and as larg...

Voyant Technologies Sonata conferencing vulnerabilties.

Please Release Vulnerability Report For Voyant Technologies Sonata Conferencing product. Larry W. Cashdollar Vapid Labs Date Published: 11/07/2000 Advisory ID: 10132000-01 CVE CAN: None currently assigned. Title: Multiple Vulnerabilities found in Sonata teleconferencing Application. Class: Design...

CVE-2000-0696

The CVE-2000-0696 entry concerns the dwhttpd web server’s administration interface in Solaris AnswerBook2 . The vulnerability arises because the admin interface does not properly authenticate requests to its supporting CGI scripts, enabling a remote attacker to add user accounts by directly invok...