CVE-2002-0545

Cisco Aironet before 11.21 with Telnet enabled allows remote attackers to cause a denial of service reboot via a series of login attempts with invalid usernames and passwords...

User account DoS in Oblix NetPoint

User account is blocked after few unsuccessfull logon atempts...

CVE-1999-1074

Webmin before 0.5 does not restrict the number of invalid passwords that are entered for a valid username, which could allow remote attackers to gain privileges via brute force password cracking...

CVE-1999-1324

VAXstations running Open VMS 5.3 through 5.5-2 with VMS DECwindows or MOTIF do not properly disable access to user accounts that exceed the break-in limit threshold for failed login attempts, which makes it easier for attackers to conduct brute force password guessing...

Beck GmbH IPC@Chip TelnetD vulnerable to brute-force password attack

Overview There is a vulnerability in the Beck IPC@CHIP that may allow an attacker to gain access to the device. Description The Beck IPC@CHIP is a single chip embedded webserver. This device contains a telnet server that "leaks information". That is, when an attacker connects to the telnet daemon...

CVE-1999-1029

SSHD2 before 2.0.12 does not log login attempts if the connection is closed early, enabling a remote attacker to guess passwords without audit entries; affected software: SSHD2 prior to 2.0.12.

CVE-1999-1152

Compaq/Microcom 6000 Access Integrator does not disconnect a client after a certain number of failed login attempts, which allows remote attackers to guess usernames or passwords via a brute force attack...

CVE-1999-1231

ssh 2.0.12, and possibly other versions, allows valid user names to attempt to enter the correct password multiple times, but only prompts an invalid user name for a password once, which allows remote attackers to determine user account names on the server...

Проблемы с паролем в SurgeFTP (bruteforceing, weak password).

пароль имеет слабое шифрование, кроме того не ограничено число попыток его ввода...

CVE-2001-0395

Lightwave ConsoleServer 3200 does not disconnect users after unsuccessful login attempts, which could allow remote attackers to conduct brute force password guessing...

CVE-2001-0471

SSH daemon version 1 aka SSHD-1 or SSH-1 1.2.30 and earlier does not log repeated login attempts, which could allow remote attackers to compromise accounts without detection via a brute force attack...

Security Advisory: IOS Reload after Scanning Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Security Advisory: IOS Reload after Scanning Vulnerability Revision 1.0 For Public Release 2001 May 24 08:00 UTC -0800 ------------------------------------------------------------------------ Summary ======= Security Scanning software can cause a memory error in...

CVE-2001-0471

SSH daemon version 1 aka SSHD-1 or SSH-1 1.2.30 and earlier does not log repeated login attempts, which could allow remote attackers to compromise accounts without detection via a brute force attack...

Hughes Technologies DSL_Vdns 1.0 - Denial of Service

source: https://www.securityfocus.com/bid/2700/info It is possible for a remote user to cause a denial of service on a host running DSLVdns. Submitting data to port 6070 and closing the connection before the request is fulfilled, will cause DSLVdns to enter a 'Default.Closed' state; therefore,...

Microsoft Windows 2000 Workstation in mixed-mode domain may ignore domain account lockout restriction due to flaw in NTLM authentication

Overview A flaw in certain configurations of Windows 2000 can allow an intruder to make an unlimited number of guesses to attempt to determine a password, despite policies intended to limit the number of guesses. Description Domain administrators can set policies governing certain aspects of...

Дырка в ConsoleServer (login weakness, information gethering)

В telnet не ограничено число попыток ввода пароля, Через административное подключение до логина можно узнать важную информацию о системе...

def-2001-03: GoodTech Systems FTP Connection DoS

====================================================================== Defcom Labs Advisory def-2001-03 GoodTech Systems FTP Connection DoS Author: Peter Grьndl [email protected] Release Date: 2001-01-22 ======================================================================...

CVE-2000-0937

Samba Web Administration Tool SWAT in Samba 2.0.7 does not log login attempts in which the username is correct but the password is wrong, which allows remote attackers to conduct brute force password guessing attacks...

Cisco - Password Bruteforcer

/ .: free source :. .: coded 4 Avatar Corp :. enabler. cisco internal bruteforcer. coder - norby concept - anyone this program just logs into a CISCO router and tries a list of passes looking for the enable one. it works in password-only CISCO as well in login-pass ones and has been succesfully...

Check Point FireWall-1 allows fragmented packets through firewall if Fast Mode is enabled

Overview If any rules include the "Fast Mode" option, Check Point Firewall-1 and VPN-1 will incorrectly allow unauthorized connection attempts to hosts that should be restricted. Description A feature called "Fast Mode" or "FASTPATH", included in Check Point FireWall-1 and VPN-1 is designed to...