151 matches found
CVE-2004-0294
YaBB 1 SP 1.3.1 is vulnerable to information disclosure via password enumeration. The vulnerability arises because the application displays different error messages when a user exists versus does not exist, enabling remote attackers to determine valid usernames and perform brute‑force password gu...
PT-2004-1448 · Yabb · Yabb
Name of the Vulnerable Software and Affected Versions: YaBB version 1 SP 1.3.1 Description: The issue allows remote attackers to identify valid users due to different error messages being displayed when a user exists or not. This makes it easier to conduct a brute force password guessing attack...
OpenSSH/PAM <= 3.6.1p1 Remote Users Ident (gossh.sh)
Exploit for linux platform in category remote exploits ==================================================== OpenSSH/PAM " exit 1 Verify the arguments. $ != 2 && usage Variables. USER="$1" HOST="$2" =-=-=-=-=-=-=-=-=-=-=-=-= Expect script functions =-=-=-=-=-=-=-...
qpopper timing analysis on to determine if a username exists on a system
Hello, during development of a pop3 tool I found an issue that makes it possible for any user to check the validity of a user on a target system. If a user is valid and an invalid password has been supplied, then the system waits 10 seconds until it sends a disconnect message and disconnect. If t...
Получение списка пользователей в Lotus Domino (information leakage)
Если пользователь существует, то HTTP-запрос GET /mail/USER.nsf даст успешный ответ, если не существует - то неуспешный...
Проблемы с LDAP в Windows 2000 (DoS, users discovery)
С помощью анонимного LDAP - запроса можно проверить существование пользователя. Многочисленные LDAP - запросы приводят к 100 загрузке сервера...
implementation problem in Microsoft LDAP?
Hello, I have been looking at the microsoft LDAP service error codes responses and when I'm not authenticated anonymous I can know if an object exists or not. I would like to know if this is an implementation problem. Problem 1: Here we have a log of the saucer program an ldap client as you can...
Microsoft IIS 5.0 - User Existence Disclosure (1)
Microsoft IIS 5.0 - User Existence Disclosure 1 source: https://www.securityfocus.com/bid/7492/info Microsoft IIS is prone to an issue where the existence of users may be revealed to remote attackers. The vulnerability exists when users attempt to authenticate against a vulnerable system. IIS wil...
Microsoft IIS 5.0 - User Existence Disclosure (1)
source: https://www.securityfocus.com/bid/7492/info Microsoft IIS is prone to an issue where the existence of users may be revealed to remote attackers. The vulnerability exists when users attempt to authenticate against a vulnerable system. IIS will generate an error page if authentication fails...
Microsoft IIS 5.0 - User Existence Disclosure (2)
Microsoft IIS 5.0 - User Existence Disclosure 2 source: https://www.securityfocus.com/bid/7492/info Microsoft IIS is prone to an issue where the existence of users may be revealed to remote attackers. The vulnerability exists when users attempt to authenticate against a vulnerable system. IIS wil...
Microsoft IIS 5.0 - User Existence Disclosure (2)
source: https://www.securityfocus.com/bid/7492/info Microsoft IIS is prone to an issue where the existence of users may be revealed to remote attackers. The vulnerability exists when users attempt to authenticate against a vulnerable system. IIS will generate an error page if authentication fails...