CVE-2001-1356

NetWin SurgeFTP 2.0f and earlier encrypts passwords using weak hashing, a fixed salt value and modulo 40 calculations, which allows remote attackers to conduct brute force password guessing attacks against the administrator account on port 7021...

CVE-2001-1360: Undefined Security Weakness

Vulnerability in Scanner Access Now Easy SANE before 1.0.5, related to pnm and saned...

CVE-2001-1364: Undefined Security Weakness

Vulnerability in autodns.pl for AutoDNS before 0.0.4 related to domain names that are not fully qualified...

CVE-2001-1361: Undefined Security Weakness

Vulnerability in The Web Information Gateway TWIG 2.7.1, possibly related to incorrect security rights and/or the generation of mailto links...

CVE-2001-1362: Undefined Security Weakness

Vulnerability in the server for nPULSE before 0.53p4...

CVE-2002-0305: Undefined Security Weakness

Zero One Tech ZOT P100s print server does not properly disable the SNMP service or change the default password, which could leave the server open to attack without the administrator's knowledge...

GOST 34.10/GOST 34.19 digital signature weakness

There is a weakness leading to ability to create "universal" signature without having a key. Also, it's possible to spoof content in case more than one key is allowed. It's also possible to deliberately create "weak" signature which will lead to private key compromise...

Super Guestbook 1.0 - Sensitive Information Disclosure

Super Guestbook 1.0 - Sensitive Information Disclosure source: https://www.securityfocus.com/bid/7319/info Super Guestbook has been reported prone to a sensitive information disclosure weakness. An attacker may disclose sensitive information regarding the Super Guestbook install by sending a HTTP...

CVE-1999-1104

Windows 95 uses weak encryption for the password list .pwl file used when password caching is enabled, which allows local users to gain privileges by decrypting the passwords...

CVE-1999-1530: Undefined Security Weakness

cgiwrap as used on Cobalt RaQ 2.0 and RaQ 3i does not properly identify the user for running certain scripts, which allows a malicious site administrator to view or modify data located at another virtual site on the same system...

CVE-1999-1115: Undefined Security Weakness

Vulnerability in the /etc/suidexec program in HP Apollo Domain/OS sr10.2 and sr10.3 beta, related to the Korn Shell ksh...

CVE-2001-0935: Undefined Security Weakness

Vulnerability in wu-ftpd 2.6.0, and possibly earlier versions, which is unrelated to the ftpglob bug described in CVE-2001-0550...

DistCC Daemon Command Execution

This module uses a documented security weakness to execute arbitrary commands on any system running distccd. Module Options msf use exploit/unix/misc/distcc/exec msf undefinedexec show actions ...actions... msf undefinedexec set ACTION msf undefinedexec show options ...show and set options... msf...

DistCC Daemon - Command Execution (Metasploit)

DistCC Daemon - Command Execution Metasploit $Id: distccexec.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and term...

Legato Networker vulnerability

There's a weakness in the authentification scheme of Legato Networker Software prior to version 6.1. When a client contacts the server, it announces in clear text via RPC his hostname or ip adress , his username and the user's groups. Then the server tries to resolve the ip adress of the machine...

3Com OfficeConnect DSL Router 812 1.1.7/840 1.1.7 - HTTP Port Router Denial of Service

// source: https://www.securityfocus.com/bid/2721/info OfficeConnect 812 is a DSL router manufactured by 3Com, and distributed by numerous DSL providers. OfficeConnect 812 is an integrated ADSL router with an onboard 4 port switch. A problem in the firmware included with this router could allow a...

CVE-1999-1370: Undefined Security Weakness

The setup wizard ie5setup.exe for Internet Explorer 5.0 disables 1 the screen saver, which could leave the system open to users with physical access if a failure occurs during an unattended installation, and 2 the Task Scheduler Service, which might prevent the scheduled execution of...

CVE-1999-1213: Undefined Security Weakness

Vulnerability in telnet service in HP-UX 10.30 allows attackers to cause a denial of service...

CVE-1999-1264: Undefined Security Weakness

WebRamp M3 router does not disable remote telnet or HTTP access to itself, even when access has been explicitly disabled...

suse: sdbsearch.cgi vulnerability

Hello, I found weakness in sdbsearch.cgi script which is a part of Suse distribution. This is perl script and since Suse 7.1 they have introduced some form of protection interpreter is called with tainting checking. However, I think it isn't enough and this bug still may produce danger...