755 matches found
Novell ZENWorks Remote Management Agent code execution
Weak authentication allows code execution...
ZDI-10-145: Novell ZENWorks Remote Management Agent Weak Authentication Remote Code Execution Vulnerability
ZDI-10-145: Novell ZENWorks Remote Management Agent Weak Authentication Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-145 August 9, 2010 -- CVSS: 9, AV:N/AC:L/Au:S/C:C/I:C/A:C -- Affected Vendors: Novell -- Affected Products: Novell Zenworks -- Vulnerabili...
Novell ZENWorks Remote Management Agent Weak Authentication Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell ZENWorks Remote Management. Access to a single node with Remote Management client installed and configured is required. The specific flaw exists within the storage of Remote Management...
VxWorks weak wuthentication
Weak password hashing algorythm with large collision probability...
Design/Logic Flaw
loginscreen.tcl in aMSN aka Alvaro's Messenger before 0.97.1 saves a password after logout, which allows physically proximate attackers to hijack a session by visiting an unattended workstation...
OSISoft PI Server weak authentication
No description provided...
CVE-2009-0216
GE Fanuc iFIX 5.0 and earlier relies on client-side authentication involving a weakly encrypted local password file, which allows remote attackers to bypass intended access restrictions and start privileged server login sessions by recovering a password or by using a modified program module...
Airscanner Mobile Security Advisory #07122001: Eye-Fi Multiple Vulnerabilities
Airscanner Mobile Security Advisory 07122001: Eye-Fi Solution Multiple Vulnerabilities Product: Eye-Fi 1.1.2 Platform: NA Requirements: NA Credits: Seth Fogie Airscanner Mobile Security http://www.airscanner.com December 20, 2007 Risk Level: Medium - Spoofed image injection, redirection of upload...
Apple Mac OS X multiple security vulnerabilities
Service Location Protocol buffer overflow, Safari code execution, Time Machine code execution, Mail file:// URI code execution, Parental Control information leakage, Terminal URI code execution,Open Directory weak authentication, NFS client and server DoS...
Meridian Prolog Manager uses weak authentication to store and transmit user credentials
Overview Meridian Systems Prolog Manager does not use strong encryption and returns a list of all user credentials when authenticating clients. These behaviors could allow an attacker to obtain user credentials and decrypt passwords. Description Meridian Systems Prolog Manager is a set of...
Guidance EnCase Enterprise uses weak authentication to identify target machines
Overview Guidance Software's EnCase Enterprise uses IP authentication to identify target machines. An attacker may be able to provide the EnCase SAFE server with a disk image from a different machine than an investigator requested. Description Guidance Software's EnCase Enterprise allows...
CVE-2006-3892
The Management Console server in EMC NetWorker formerly Legato NetWorker 7.3.2 before Jumbo Update 1 uses weak authentication, which allows remote attackers to execute arbitrary commands...
CVE-2006-3892
The Management Console server in EMC NetWorker formerly Legato NetWorker 7.3.2 before Jumbo Update 1 uses weak authentication, which allows remote attackers to execute arbitrary commands...
CVE-2006-3892
The CVE concerns EMC NetWorker Management Console (Legato NetWorker) running version 7.3.2 before Jumbo Update 1, where weak authentication permits remote attackers to execute arbitrary commands. Affected component is the Management Console server; root-equivalent commands could be run on connect...
EMC NetWorker Management Console weak authentication vulnerability
Overview A vulnerability in the authentication mechanism used by the Legato NetWorker Management Console may allow an attacker to execute arbitrary commands. Description The EMC NetWorker formerly Legato NetWorker family of products provides solutions for backup and recovery of data. It includes...
Ingate Firewall / SIParator weak authentication
Authentication mechanism is vulnerable to replay attacks...
Multiple security vulnerabilities in Bluetooth protocol and Bluetooth stacks implementations
Buffer overflows, weak authentication algorithm, weak pseudo-random number generators, directory traversals, etc...
[KAPDA::#61] - PacPoll <= 4.0 Multiple Vulnerabilities
KAPDA New advisory Vulnerable product : PacPoll = 4.0 Vendor: http://www.pacosdrivers.com/asp/poll/poll.asp Vulnerability: Admin Logon bypass , SQLInjection Date : -------------------- Found : 2006/10/10 Vendor Contacted : N/A Release Date : 2006/10/25 Vulnerabilities: -------------------- Admin...
CVE-2006-3226
Cisco Secure Access Control Server ACS 4.x for Windows uses the client's IP address and the server's port number to grant access to an HTTP server port for an administration session, which allows remote attackers to bypass authentication via various methods, aka "ACS Weak Session Management...