CVE-2008-7050

The passwordcheck function in auth/authphpbb3.php in WoW Raid Manager 3.5.1 before Patch 1, when using PHPBB3 authentication, 1 does not invoke the CheckPassword function with the required arguments, which always triggers an authentication failure, and 2 returns true instead of false when an...

Authentication flaw

The passwordcheck function in auth/authphpbb3.php in WoW Raid Manager 3.5.1 before Patch 1, when using PHPBB3 authentication, 1 does not invoke the CheckPassword function with the required arguments, which always triggers an authentication failure, and 2 returns true instead of false when an...

CVE-2008-7050

The passwordcheck function in auth/authphpbb3.php in WoW Raid Manager 3.5.1 before Patch 1, when using PHPBB3 authentication, 1 does not invoke the CheckPassword function with the required arguments, which always triggers an authentication failure, and 2 returns true instead of false when an...

TightVNC - Authentication Failure Integer Overflow (PoC)

TightVNC - Authentication Failure Integer Overflow PoC !/usr/bin/env python [email protected] Modified Andres Lopez Luksenberg's exploit for Authentication Failure scenario in TightVNC. BID 33569 CVE-2009-0388 import socket serversocket = socket.socketsocket.AFINET, socket.SOCKSTREAM...

TightVNC Integer Overflow

!/usr/bin/env python [email protected] Modified Andres Lopez Luksenberg's exploit for Authentication Failure scenario in TightVNC. BID 33569 CVE-2009-0388 import socket serversocket = socket.socketsocket.AFINET, socket.SOCKSTREAM serversocket.bind'', 5900 serversocket.listen1 while True:...

TightVNC - Authentication Failure Integer Overflow (PoC)

!/usr/bin/env python [email protected] Modified Andres Lopez Luksenberg's exploit for Authentication Failure scenario in TightVNC. BID 33569 CVE-2009-0388 import socket serversocket = socket.socketsocket.AFINET, socket.SOCKSTREAM serversocket.bind'', 5900 serversocket.listen1 while True:...

Update Protection against Symantec AppStream Client LaunchObj ActiveX Control Program Execution

A remote code execution vulnerability was reported in Symantec AppStream Client. The AppStream Client is part of a Software Virtualization Solution SVS which allows streaming of virtual applications to users in an enterprise environment using the AppStream Server. The vulnerability is due to...

CVE-2008-5690

The Kerberos credential renewal feature in Sun Solaris 8, 9, and 10, and OpenSolaris build snv01 through snv104, allows local users to cause a denial of service authentication failure via unspecified vectors related to incorrect cache file permissions, and lack of credential storage by the...

Design/Logic Flaw

The Kerberos credential renewal feature in Sun Solaris 8, 9, and 10, and OpenSolaris build snv01 through snv104, allows local users to cause a denial of service authentication failure via unspecified vectors related to incorrect cache file permissions, and lack of credential storage by the...

CVE-2008-5690

CVE-2008-5690 affects Sun Solaris 8–10 and OpenSolaris builds; root cause is the pam_krb5 credential renewal mechanism introduced flaws in cache file permissions and missing credential storage in store_cred, enabling local users to cause authentication failure (DoS). Connected documents confirm a...

CVE-2008-5690

The Kerberos credential renewal feature in Sun Solaris 8, 9, and 10, and OpenSolaris build snv01 through snv104, allows local users to cause a denial of service authentication failure via unspecified vectors related to incorrect cache file permissions, and lack of credential storage by the...

Fail2ban 0.8 - Remote Denial of Service

Fail2ban 0.8 - Remote Denial of Service source: https://www.securityfocus.com/bid/25117/info Fail2ban is prone to a remote denial-of-service vulnerability because the application fails to properly ensure the validity of authentication-failure messages. Successfully exploiting this issue allows...

McAfee Virex fails to properly authenticate the source of updates

Overview McAfee Virex automatic updates may not properly authenticate the source of updates. This may allow a remote attacker to execute arbitrary commands on a vulnerable system. Description McAfee Virex is anti-virus software for the Mac OS X platform. McAfee Virex 7 for Mac OS X connects to a...

Fetchmail multiple security vulnerabilities

Multiple password leak problems on inability to establish secured authentication, DoS...

CVE-2006-6849

CVE-2006-6849 affects Cahier de texte (CDT) 2.2. The vulnerability is in administration/index.php where the authentication failure handling does not exit properly, allowing remote attackers to perform unauthorized administrative actions. This is a network‑vector issue with low complexity and no a...

EUVD-2006-6768

The 1 settings.php and 2 subscribers.php scripts in Open Newsletter 2.5 and earlier do not exit when authentication fails, which allows remote attackers to perform unauthorized administrative actions, or execute arbitrary code in conjunction with another vulnerability...

CVE-2006-6435

The CVE affects Xerox WorkCentre/WorkCentre Pro SNMP: versions prior to 12.050.03.000, 13.x prior to 13.050.03.000, and 14.x prior to 14.050.03.000 do not generate authentication failure traps, enabling remote attackers to perform brute-force login attempts to gain system access and obtain sensit...

security flaw

pamldap in nssldap on Red Hat Enterprise Linux 4, Fedora Core 3 and earlier, and possibly other distributions does not return an error condition when an LDAP directory server responds with a PasswordPolicyResponse control response, which causes the pamauthenticate function to return a success cod...

Secure Elements Class 5 AVR server fails to properly authenticate session start messages

Overview The Secure Elements Class 5 AVR server fails to properly authenticate "session start" messages. This may allow an attacker to cause the server to initiate TCP connections to arbitrary destinations, which can cause a denial of service to both the server and the specified target. Descripti...

CVE-2004-1611

SalesLogix 6.1 does not verify if a user is authenticated before performing sensitive operations, which could allow remote attackers to 1 execute arbitrary SLX commands on the server or spoof the server via a man-in-the-middle MITM attack, or 2 obtain the database password via a GetConnection...