6415 matches found
CVE-2000-0379: Undefined Security Weakness
The Netopia R9100 router does not prevent authenticated users from modifying SNMP tables, even if the administrator has configured it to do so...
Microsoft Windows SMB Registry : SFCDisable Key Permission Weakness
The registry key HKLM\SOFTWARE\Microsoft\Windows NT\WinLogon\SFCDisable has its value set to a value other than 0 or 4. Any value other than 0 or 4 disables the Windows File Protection, which allows any user on the remote host to view / modify any file he wants. This probably means that this host...
CVE-1999-0142: Undefined Security Weakness
The Java Applet Security Manager implementation in Netscape Navigator 2.0 and Java Developer's Kit 1.0 allows an applet to connect to arbitrary hosts...
CVE-1999-0819: Undefined Security Weakness
NTMail does not disable the VRFY command, even if the administrator has explicitly disabled it...
Microsoft Windows SMB Registry : Key Permission Weakness Admin Privilege Escalation
The following keys contain the name of the program that shall be started when the computer starts. The users who have the right to modify them can easily make the admin run a Trojan program that will give them admin privileges. C Tenable Network Security, Inc. include"compat.inc"; if description...
Microsoft Windows SMB Registry : Schedule Key Permission Weakness Local Privilege Escalation
The registry key SYSTEM\CurrentControlSet\Services\Schedule is writeable by users who are not in the admin group. Since the scheduler runs with SYSTEM privileges, this allow a malicious user to gain these privileges on this system. C Tenable Network Security, Inc. include"compat.inc"; if...
CVE-2000-0364: Undefined Security Weakness
screen and rxvt in Red Hat Linux 6.0 do not properly set the modes of tty devices, which allows local users to write to other ttys...
CVE-1999-0895: Undefined Security Weakness
Firewall-1 does not properly restrict access to LDAP attributes...
CVE-1999-0903: Undefined Security Weakness
genfilt in the AIX Packet Filtering Module does not properly filter traffic to destination ports greater than 32767...
CVE-2000-0250
The crypt function in QNX uses weak encryption, which allows local users to decrypt passwords...
CVE-2000-0222: Undefined Security Weakness
The installation for Windows 2000 does not activate the Administrator password until the system has rebooted, which allows remote attackers to connect to the ADMIN$ share without a password until the reboot occurs...
PcAnywhere weak password encryption
PcAnywhere weak password encryption ---- Discussion ---- PcAnywhere 9.0.0 set to its default security value uses a trivial encryption method so user names and password are not sent directly in clear. Since most users have the encryption methods set to either "none" or "PcAnyWhere", their password...
CVE-1999-0189: Undefined Security Weakness
Solaris rpcbind listens on a high numbered UDP port, which may not be filtered since the standard port number is 111...
CVE-2000-0084
CuteFTP uses weak encryption to store password information in its tree.dat file...
CVE-1999-0829
HP Secure Web Console uses weak encryption...
CVE-1999-0852: Undefined Security Weakness
IBM WebSphere sets permissions that allow a local user to modify a deinstallation script or its data files stored in /usr/bin...
CVE-1999-0653: Undefined Security Weakness
A component service related to NIS+ is running...
CVE-1999-0568: Undefined Security Weakness
rpc.admind in Solaris is not running in a secure mode...