CVE-2006-6997

The CVE-2006-6997 entry concerns an unspecified vulnerability in a cryptographic feature of MailEnable, resulting in weakened authentication security. Affected versions are MailEnable Standard Edition before 1.93, Professional Edition before 1.73, and Enterprise Edition before 1.21. The descripti...

CVE-2006-6997: Improper Authentication

Unspecified vulnerability in a cryptographic feature in MailEnable Standard Edition before 1.93, Professional Edition before 1.73, and Enterprise Edition before 1.21 leads to "weakened authentication security" with unknown impact and attack vectors. NOTE: due to lack of details, it is not clear...

Foreign hackers resources-vulnerability warning-the black bar safety net

allhack.com This website provides a library and a download area. The library for beginners provides hacking knowledge and computer technology basics. The download area includes the Scan Tool, FLOOD tool, decryption tools, denial of service attacks and the like. alw. nih,gov In the security...

CVE-2004-1189

The addtohistory function in svrprincipal.c in libkadm5srv for MIT Kerberos 5 krb5 up to 1.3.5, when performing a password change, does not properly track the password policy's history count and the maximum number of keys, which can cause an array index out-of-bounds error and may allow...

CVE-2003-1095

BEA WebLogic Server and Express 7.0 and 7.0.0.1, when using "memory" session persistence for web applications, does not clear authentication information when a web application is redeployed, which could allow users of that application to gain access without having to re-authenticate...

CVE-1999-1049

ARCserve NT agents use weak encryption XOR for passwords, which allows remote attackers to sniff the authentication request to port 6050 and decrypt the password...

Catalyst 5000 Series 802.1x Vulnerability

...

CVE-2000-0549

CVE-2000-0549 affects Kerberos 4 KDC by not properly checking for null termination in AUTH_MSG_KDC_REQUEST, enabling remote attackers to cause denial of service via a malformed request. The available sources describe the issue as a null-termination handling flaw in the KDC protocol message proces...

Firewall-1 Session Agent, DOS and password thief

hi, after the great revelations at the las vegas black hat about many security vulnerabilities in firewall-1, i was looking at this little module i use in my compagny and called "authentication session agent". We use it all over the corporate network to allow only some priviledged users to go int...