8313 matches found
Cisco Virtual Central Office 4000 (VCO/4K) 5.1.3 - Remote Username / Password Retrieval
source: https://www.securityfocus.com/bid/1885/info A vulnerability exists in the Cisco Virtual Central Office 4000 VCO/4K programmable voice switch running software versions 5.13 and earlier. The usernames and passwords for the device's SNMP administration interface are protected by a simple...
CVE-2000-0697
The administration interface for the dwhttpd web server in Solaris AnswerBook2 allows interface users to remotely execute commands via shell metacharacters...
CVE-2000-0634
The web administration interface for CommuniGate Pro 3.2.5 and earlier allows remote attackers to read arbitrary files via a .. dot dot attack...
CVE-2000-0257
Buffer overflow in the NetWare remote web administration utility allows remote attackers to cause a denial of service or execute commands via a long URL...
CVE-2000-0598
Fortech Proxy+ allows remote attackers to bypass access restrictions for to the administration service by redirecting their connections through the telnet proxy...
Microsoft Windows 9xME - Share Level Password Bypass (1)
Microsoft Windows 9xME - Share Level Password Bypass 1 source: https://www.securityfocus.com/bid/1780/info Share level password protection for the File and Print Sharing service in Windows 95/98/ME can be bypassed. Share level access provides peer to peer networking capabilities in the Windows...
siemens.ipphone.txt
From: Michal Zalewski Subject: Another thingy. To: [email protected] -- Standard disclaimer applies. I am speaking as a private person, -- and doing it in completely informal way, which shouldn't be interpreted -- in any other way but as my personal opinions and beliefs, which don't have ...
horde.txt
Date: Fri, 8 Sep 2000 17:03:36 +0200 Sender: Bugtraq List From: "Winter, Christian" Subject: horde library bug - unchecked from-address To: [email protected] Hi, this bug we discovered recently. HORDE 1.2.0 $from-bug and how to exploit with IMP 2.2.0 Disclaimer: This is intended as a pape...
Дырка в eTrust Access Control (SeOS)
Для удаленного администрирования используется rlogin-подобный протокол без авторизации с паролем, что позволяет атаки из локальной сети...
Sun AnswerBook2 1.4.21.4.31.4.4 - Administration Interface Access
Sun AnswerBook2 1.4.21.4.31.4.4 - Administration Interface Access source: https://www.securityfocus.com/bid/1554/info A lack of authentication checks for certain scripts within the administration interface of AnswerBook2 versions 1.4.2 and prior, for Solaris, allows remote users to create...
Sun AnswerBook2 1.4.2/1.4.3/1.4.4 - Administration Interface Access
source: https://www.securityfocus.com/bid/1554/info A lack of authentication checks for certain scripts within the administration interface of AnswerBook2 versions 1.4.2 and prior, for Solaris, allows remote users to create administration accounts. By directly accessing the /cgi-bin/admin/admin...
Дырка в Course Info
Пароль администрирования хранится в ресстре открытым текстом...
telsrv.txt
Application: GAMSoft's TelSrv 1.4/1.5 Problem Type: Denial of Service Author: Prizm Platforms: Windows 95/98/NT/2k Vendor Status: Contacted. Vendor Website: http://www.gamsoft.com Product Description ------------------- TelSrv is superior Telnet server. It provides you with the ability to remotel...
Netscape Administration Server /admin-serv/config/admpw Admin Password Disclosure
The file /admin-serv/config/admpw is readable. This file contains the encrypted password for the Netscape administration server. Although it is encrypted, an attacker may attempt to crack it by brute force. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10468;...
Security Advisory: Netscape Administration Server Password Disclosure. ( netscape.ad-1.00-07 )
July 11, 2000 Security Advisory netscape.ad.00-07 : Netscape Administration Server Password Disclosure. Affected Platforms: AIX Digital-Unix HP-Unix IRIX Linux Solaris WindowsNT Affected Versions: Netscape SuiteSpot running on: Netscape Enterprise/3.5.1C Netscape Enterprise/3.5.1G Netscape...
netscape.ad.00-07
July 11, 2000 Security Advisory netscape.ad.00-07 : Netscape Administration Server Password Disclosure. Affected Platforms: AIX Digital-Unix HP-Unix IRIX Linux Solaris WindowsNT Affected Versions: Netscape SuiteSpot running on: Netscape Enterprise/3.5.1C Netscape Enterprise/3.5.1G Netscape...
Andrew Lewis
The Problem: ------------ Many admins who use Proxy+ configure the remote administration port which works over HTTP to only accept connections from the localhost. Fortunately enough, the admin port doesn't allow connections which have been bounced through the HTTP proxy. The telnet proxy, on the...
CVE-2000-0598
Fortech Proxy+ allows remote attackers to bypass access restrictions for to the administration service by redirecting their connections through the telnet proxy...
CVE-2000-0434
The CVE-2000-0434 issue concerns the Allmanage web site administration software. The underlying problem is that the administrative password is stored in plaintext in a file that could be accessed by remote attackers. This creates the potential for an attacker to obtain the password and gain unaut...