2941 matches found
CVE-2001-1535
Slashcode 2.0 creates new accounts with an 8-character random password, which could allow local users to obtain session ID's from cookies and gain unauthorized access via a brute force attack...
CVE-2001-0839
ibillpm.pl in iBill password management system generates weak passwords based on a client's MASTERACCOUNT, which allows remote attackers to modify account information in the .htpasswd file via brute force password guessing...
CVE-2001-0839
CVE-2001-0839 affects the iBill web app’s ibillpm.pl CGI password management. The vulnerability arises from a weak password generation mechanism that creates passwords based on a client’s MASTER_ACCOUNT, enabling brute-force guessing to modify entries in the .htpasswd file via remote access. The ...
Weak authentication in iBill's Password Management CGI
Vulnerable Program: ibillpm.pl Perl CGI script Distributed by: iBill Internet Billing Company, http://www.ibill.com Problem: iBill hard codes a weak password for the user management script, ibillpm.pl, installed for clients that use the Password Management system. The weak password is the client'...
Beck GmbH IPC@Chip TelnetD service ships with inadequately protected default account
Overview There is a vulnerability in the Beck IPC@CHIP that may allow an attacker to gain access to the device. Description The Beck IPC@CHIP is a single chip embedded webserver. This device also contains a telnet server that ships with an account named "Default". This account essentially grants...
Respondus for WebCT 1.1.2 - Weak Password Encryption
Respondus for WebCT 1.1.2 - Weak Password Encryption source: https://www.securityfocus.com/bid/3228/info Respondus is an application designed to add functionality to WebCT's quiz, self-test and survey tools. WebCT is a commercial e-learning solution. When a user opts to have Respondus remember th...
CuteFTP 4.2 - Default Weak Password Encoding
CuteFTP 4.2 - Default Weak Password Encoding source: https://www.securityfocus.com/bid/3233/info CuteFTP is a popular commercial FTP client for Microsoft Windows systems. CuteFTP v4.2and possibly earlier versions uses a weak system for encoding passwords for accounts on FTP sites. Passwords are...
Respondus for WebCT 1.1.2 - Weak Password Encryption
source: https://www.securityfocus.com/bid/3228/info Respondus is an application designed to add functionality to WebCT's quiz, self-test and survey tools. WebCT is a commercial e-learning solution. When a user opts to have Respondus remember the username/password for WebCT access, the information...
Intego FileGuard 2.04.0 - Weak Password Encryption
Intego FileGuard 2.04.0 - Weak Password Encryption source: https://www.securityfocus.com/bid/3213/info Intego FileGuard is a commercial access control utility for Mac OS versions 7-9.1. It's functionality includes the ability to enforce privileges, log activities, manage user accounts, restrict...
Intego FileGuard 2.0/4.0 - Weak Password Encryption
source: https://www.securityfocus.com/bid/3213/info Intego FileGuard is a commercial access control utility for Mac OS versions 7-9.1. It's functionality includes the ability to enforce privileges, log activities, manage user accounts, restrict access by time, etc. Intego FileGuard provides syste...
Многочисленные дырки в Avaya Argent Office (DoS, weak password, empty SNMP password, tftp file spoofing)
Многочисленные дырки...
CVE-2001-1354
NetWin Authentication module NWAuth 2.0 and 3.0b, as implemented in SurgeFTP, DMail, and possibly other packages, uses weak password hashing, which could allow local users to decrypt passwords or use a different password that has the same hash value as the correct password...
NetWin DMail 2.x SurgeFTP 1.02.0 - Weak Password Encryption
NetWin DMail 2.x SurgeFTP 1.02.0 - Weak Password Encryption // source: https://www.securityfocus.com/bid/3075/info The Netwin Authentication module, or NWAuth, is an external authentication module used by several Netwin products. A simple one-way hash function is used by NWAuth to perform passwor...
NetWin DMail 2.x / SurgeFTP 1.0/2.0 - Weak Password Encryption
// source: https://www.securityfocus.com/bid/3075/info The Netwin Authentication module, or NWAuth, is an external authentication module used by several Netwin products. A simple one-way hash function is used by NWAuth to perform password encryption operations. As a result, it is trivial for an...
ArGoSoft FTP Server 1.2.2.2 Weak password encryption
ArGoSoft FTP Server 1.2.2.2 Weak password encryption AFFECTED SYSTEMS ArGoSoft FTP Server 1.2.2.2 DESCRIPTION ArGoSoft FTP Server 1.2.2.2 for win32 is vulnerable to decryption of the password file. As a matter of fact the programmers are aware of this since they have implemented decryption...
ArGoSoft FTP Server 1.2.2.2 - Weak Password Encryption
ArGoSoft FTP Server 1.2.2.2 - Weak Password Encryption // source: https://www.securityfocus.com/bid/3029/info ArGoSoft FTP server is an FTP server for the Windows platform. A design error exists in ArGoSoft FTP which enables an authenticated user to view other users encrypted passwords. However d...
3Com SuperStack II PS Hub 40 - TelnetD Weak Password Protection
3Com SuperStack II PS Hub 40 - TelnetD Weak Password Protection source: https://www.securityfocus.com/bid/3034/info A vulnerability exists in certain models of 3Com hubs and potentially other 3Com network products. The affected devices fail to properly restrict the allowed number of login attempt...
ArGoSoft FTP Server 1.2.2.2 - Weak Password Encryption
// source: https://www.securityfocus.com/bid/3029/info ArGoSoft FTP server is an FTP server for the Windows platform. A design error exists in ArGoSoft FTP which enables an authenticated user to view other users encrypted passwords. However due to a weak encryption scheme it is possible for a use...
CesarFTP v0.98b triple dot Directory Traversal / Weak password encryption
CesarFTP v0.98b triple dot Directory Traversal / Weak password encryption AFFECTED SYSTEMS CesarFTP v0.98b on Windows 9x / ME DESCRIPTION 1 Directory Traversal First, we need a directory where we have access to on the victim host... Or we can create one if we have enough rights ftp://127.0.0.1/...
GuildFTPD v0.97 Directory Traversal / Weak password encryption
GuildFTPD v0.97 Directory Traversal / Weak password encryption AFFECTED SYSTEMS GuildFTPD v0.97 tested on Windows 9x, probably works on NT / 2k as well DESCRIPTION 1 Directory Traversal Consider the following FTP session I'm using windows' FTP.EXE proggie, and its associated commands : The...