8671 matches found
Sun AnswerBook2 1.4.2/1.4.3/1.4.4 - Administration Interface Access
source: https://www.securityfocus.com/bid/1554/info A lack of authentication checks for certain scripts within the administration interface of AnswerBook2 versions 1.4.2 and prior, for Solaris, allows remote users to create administration accounts. By directly accessing the /cgi-bin/admin/admin...
Дырка в Course Info
Пароль администрирования хранится в ресстре открытым текстом...
telsrv.txt
Application: GAMSoft's TelSrv 1.4/1.5 Problem Type: Denial of Service Author: Prizm Platforms: Windows 95/98/NT/2k Vendor Status: Contacted. Vendor Website: http://www.gamsoft.com Product Description ------------------- TelSrv is superior Telnet server. It provides you with the ability to remotel...
Netscape Administration Server /admin-serv/config/admpw Admin Password Disclosure
The file /admin-serv/config/admpw is readable. This file contains the encrypted password for the Netscape administration server. Although it is encrypted, an attacker may attempt to crack it by brute force. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10468;...
Security Advisory: Netscape Administration Server Password Disclosure. ( netscape.ad-1.00-07 )
July 11, 2000 Security Advisory netscape.ad.00-07 : Netscape Administration Server Password Disclosure. Affected Platforms: AIX Digital-Unix HP-Unix IRIX Linux Solaris WindowsNT Affected Versions: Netscape SuiteSpot running on: Netscape Enterprise/3.5.1C Netscape Enterprise/3.5.1G Netscape...
netscape.ad.00-07
July 11, 2000 Security Advisory netscape.ad.00-07 : Netscape Administration Server Password Disclosure. Affected Platforms: AIX Digital-Unix HP-Unix IRIX Linux Solaris WindowsNT Affected Versions: Netscape SuiteSpot running on: Netscape Enterprise/3.5.1C Netscape Enterprise/3.5.1G Netscape...
CVE-2000-0417: Undefined Security Weakness
The HTTP administration interface to the Cayman 3220-H DSL router allows remote attackers to cause a denial of service via a long username or password...
CVE-2000-0435: Undefined Security Weakness
The allmanageup.pl file upload CGI script in the Allmanage Website administration software 2.6 can be called directly by remote attackers, which allows them to modify user accounts or web pages...
Andrew Lewis
The Problem: ------------ Many admins who use Proxy+ configure the remote administration port which works over HTTP to only accept connections from the localhost. Fortunately enough, the admin port doesn't allow connections which have been bounced through the HTTP proxy. The telnet proxy, on the...
CVE-2000-0598
Fortech Proxy+ allows remote attackers to bypass access restrictions for to the administration service by redirecting their connections through the telnet proxy...
CVE-2000-0434
The CVE-2000-0434 issue concerns the Allmanage web site administration software. The underlying problem is that the administrative password is stored in plaintext in a file that could be accessed by remote attackers. This creates the potential for an attacker to obtain the password and gain unaut...
CVE-2000-0434: Undefined Security Weakness
The administrative password for the Allmanage web site administration software is stored in plaintext in a file which could be accessed by remote attackers...
Переполнение буфера в ColdFusion
Переполнение буфера при длинном порядка 40000 символов пароле администрирования...
CVE-2000-0113
The CVE-2000-0113 entry concerns the SyGate Remote Management program where the administration service does not properly restrict access, allowing remote attackers to cause a denial of service or view network traffic statistics. Connected documents corroborate a remote controller component (SyGat...
CVE-2000-0113: Undefined Security Weakness
The SyGate Remote Management program does not properly restrict access to its administration service, which allows remote attackers to cause a denial of service, or access network traffic statistics...
CVE-2000-0417
The HTTP administration interface to the Cayman 3220-H DSL router allows remote attackers to cause a denial of service via a long username or password...
Banner.rotating
-- Banner rotating 01 -- -- Description: "Banner rotating 01" is a cgi script distributed for free on several site builder sites, including Hot Area. The script is available on http://www.hotarea.net/web/scripts/banner01/ The cgi script offers numerous functions for those wishing to manage rotati...
Allmanage.pl vulnerability
Allmanage.pl vulnerability 13 may 2000 Websites using 'Allmanage Website Administration Software 2.6 WITH the upload ability', and maybe earlier versions , contain a vulnerability wich gives you full add/del/change access in the user-account directories and you can change the files in the main...
McMurtreyWhitaker Associates Cart32 2.63.0 - Remote Administration Password
McMurtreyWhitaker Associates Cart32 2.63.0 - Remote Administration Password source: https://www.securityfocus.com/bid/1153/info Within cart32.exe, entering any password by way of http://target/scripts/cart32.exe/cart32clientlist, a remote user could obtain vital client information such as usernam...