50 matches found
Secure Mail : Email Sync is not possible for a single user.
Exchange error : Seeing error for the user wd0283 Error - 4023,MSExchangeADAccess : locked out until 5/3/2017...
CVE-2014-0317
The Security Account Manager Remote SAMR protocol implementation in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows Server 2012 Gold and R2 does not properly determine the user-lockout state, which makes it easier for...
Microsoft Windows SAMR Protocol Security Bypass Vulnerability (2934418)
This host is missing an important security update according to Microsoft Bulletin MS14-016. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
MS14-016: Vulnerability in Security Account Manager Remote (SAMR) Protocol Could Allow Security Feature Bypass (2934418)
A security feature bypass vulnerability exists in Windows due to the Security Account Manager Remote SAMR protocol incorrectly validating the user lockout state. Remote, authenticated attackers can exploit this issue to conduct brute force attacks against user passwords. Note that the host must...
Implement user lockout mechanism to stop bruteforce login attacks
Hacker can try as many time he wants to login JIRA. You can build client, which sends username+password combinations as many time as you like. .. and if you have username, it is much easier to get in. ---- Implementation ideas: 1 Lock user after sequential X incorrect logins - X can be set by...
Implement user lockout mechanism to stop bruteforce login attacks
Hacker can try as many time he wants to login JIRA. You can build client, which sends username+password combinations as many time as you like. .. and if you have username, it is much easier to get in. ---- Implementation ideas: 1 Lock user after sequential X incorrect logins - X can be set by...
Usermin: Multiple vulnerabilities
Background Usermin is a web-based administration tool for Unix. It supports a wide range of user applications including configuring mail forwarding, setting up SSH or reading mail. Description Usermin contains two security vulnerabilities. One fails to properly sanitize email messages that contai...
Webmin: Multiple vulnerabilities
Background Webmin is a web-based administration tool for Unix. It supports a wide range of applications including Apache, DNS, file sharing and others. Description Webmin contains two security vulnerabilities. One allows any user to view the configuration of any module and the other could allow a...
ZyXEL Router Default Telnet Password Present
The remote host is a ZyXEL router with a default password. An attacker could telnet to it and reconfigure it to lock the owner out and prevent him from using his Internet connection, or create a dial-in user to connect directly to the LAN attached to it. This script was written by Giovanni Fiasch...
Solaris 2.6 / 7 / 8 Lock Users Out of mailx Exploit
Exploit for solaris platform in category dos / poc =================================================== Solaris 2.6 / 7 / 8 Lock Users Out of mailx Exploit =================================================== !/bin/sh Solaris mailx1 username.lock proof of theory makes mailx not work for all users...