2139 matches found
Проблема в Firewall-1 Session Agent
При авторизации отдельно проверяется имя пользователя и пароль, кроме того не установлено максимальное число попыток...
CVE-2000-0278
The SalesLogix Eviewer allows remote attackers to cause a denial of service by accessing the URL for the slxweb.dll administration program, which does not authenticate the user...
WFTPD 2.4.1RC11 - STATLIST Denial of Service
WFTPD 2.4.1RC11 - STATLIST Denial of Service source: https://www.securityfocus.com/bid/1506/info WFTPD versions prior to 2.4.1RC11 suffer from a number of vulnerabilities. 1 Issuing a STAT command while a LIST is in progress will cause the ftp server to crash. 2 If the REST command is used to wri...
Blackboard Courseinfo v4.0 User Authentication
Apparently Courseinfo or at least the implementation I was playing with has no user authentication, meaning that anyone can force feed their own form values and Perl with merrily modify the database. So for instance running: all form input is in caps for readability...
Дыра в AllManage
Возможно обойти авторизацию пользователя, получить доступ к административному паролю и конфигурационным файлам...
CVE-2000-0244
The CVE-2000-0244 entry concerns the Citrix ICA (Independent Computing Architecture) protocol, which uses weak encryption (XOR) for user authentication. According to the provided data, the vulnerability has a CVSS v2 base score of 10.0 (HIGH) with network attack vector, no authentication required...
CVE-2000-0244
The Citrix ICA Independent Computing Architecture protocol uses weak encryption XOR for user authentication...
cc-pinextract.txt
@Stake Inc. L0pht Research Labs www.atstake.com www.L0pht.com Security Advisory Advisory Name: CRYPTOCard PalmToken PIN Extraction Release Date: April 10, 2000 Application: CRYPTOAdmin 4.1 server with CRYPTOCard PT-1 token 1.04 Platform: Server software on any environment and token software on Pa...
CRYPTOAdmin 4.1 server with PalmPilot PT-1 token 1.04 PIN Extract ion
@Stake Inc. L0pht Research Labs www.atstake.com www.L0pht.com Security Advisory Advisory Name: CRYPTOCard PalmToken PIN Extraction Release Date: April 10, 2000 Application: CRYPTOAdmin 4.1 server with CRYPTOCard PT-1 token 1.04 Platform: Server software on any environment and token software on Pa...
DoS против pcAnywhere
Завершение клиентского сеанса до авторизации приводит к краху сервиса...
CVE-2000-0244
The Citrix ICA Independent Computing Architecture protocol uses weak encryption XOR for user authentication...
solaris.dmispd.txt
Greetings, OVERVIEW Several holes in the Solaris 2.7 SPARC/x86 dmispd daemon will allow malicious users to do various DoS attacks and probably more. BACKGROUND I've only tested 2.7 with the latest patches as of this writing. dmispd is the "DMI service provider". I would appreciate if someone who...
zetamail-2.1.txt
Remote D.o.S Attack in ZetaMail 2.1 Mail POP3/SMTP Server Vulnerability PROBLEM UssrLabs found a Local/Remote DoS Attack in ZetaMail 2.1 Mail POP3/SMTP Server, the buffer overflow is caused by a long user name/password, 3500 characters. There is not much to expand on.... just a simple hole Exampl...
BSD 2.1 FTP.Core Local Exploit
FTP.CORE attack for BSD 2.1 ----------------------------------------------------------------------------------------------------------------- by The Bronc Buster [email protected] http://www2.succeed.net/bbuster Made for The Infected www.infected.com...
CVE-1999-1298
Sysinstall in FreeBSD 2.2.1 and earlier, when configuring anonymous FTP, creates the ftp user without a password and with /bin/date as the shell, which could allow attackers to gain access to certain system resources...
DUO-PSA-2016-001: Duo Product Security Advisory
Duo Product Security Advisory Advisory ID: DUO-PSA-2016-001 Original Publication Date: 2016-05-11 Revision Date: 2016-05-23 Status: Confirmed, Fixed Document Revision: 3 Overview Duo Security has identified multiple issues in the Duo Authentication Proxy which, under certain configurations, could...
CVE-2024-36728
TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary. The overflow allows an authenticated user to execute arbitrary code by POSTing to apply.cgi via the action vlansetting with a sufficiently long dns1 or dns 2 key...