Cisco VPN 3000 Series Concentrator Client - Authentication Denial of Service

Cisco VPN 3000 Series Concentrator Client - Authentication Denial of Service // source: https://www.securityfocus.com/bid/5620/info Cisco VPN 3000 series concentrators are prone to a denial of service condition when receiving an overly long username string during authentication from a VPN client...

Cisco VPN 3000 Series Concentrator Client - Authentication Denial of Service

// source: https://www.securityfocus.com/bid/5620/info Cisco VPN 3000 series concentrators are prone to a denial of service condition when receiving an overly long username string during authentication from a VPN client. Successful exploitation will cause the device to reload. / ISAKMP Cisco VPN...

Microsoft SQL Server 2000 - User Authentication Remote Buffer Overflow

source: https://www.securityfocus.com/bid/5411/info A vulnerability has been discovered in Microsoft SQL Server that could make it possible for remote attackers to gain access to target hosts. It is possible for an attacker to cause a buffer overflow condition on the vulnerable SQL server with a...

CVE-2002-0672

Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 allows attackers with physical access to restore the phone to factory defaults without authentication via a menu option, which sets the administrator password to null...

CVE-2002-0563

The default configuration of Oracle 9i Application Server 1.0.2.x allows remote anonymous users to access sensitive services without authentication, including Dynamic Monitoring Services 1 dms0, 2 dms/DMSDump, 3 servlet/DMSDump, 4 servlet/Spy, 5 soap/servlet/Spy, and 6 dms/AggreSpy; and Oracle Ja...

CVE-2002-0241

NDSAuth.DLL in Cisco Secure Authentication Control Server ACS 3.0.1 does not check the Expired or Disabled state of users in the Novell Directory Services NDS, which could allow those users to authenticate to the server...

CVE-2002-0255

The default configuration of Arescom NetDSL 800 does not require authentication, which allows remote attackers to cause a denial of service or reconfigure the router...

Outfront Spooky 2.x - Login SQL Query Manipulation Password

Outfront Spooky 2.x - Login SQL Query Manipulation Password source: https://www.securityfocus.com/bid/4661/info Spooky Login is a commerical web access control and account management software package. It is distributed and maintained by Outfront, and is designed for Microsoft IIS Webservers. Unde...

Outfront Spooky 2.x - Login SQL Query Manipulation Password

source: https://www.securityfocus.com/bid/4661/info Spooky Login is a commerical web access control and account management software package. It is distributed and maintained by Outfront, and is designed for Microsoft IIS Webservers. Under some circumstances, it may be possible for a remote user t...

IBM Informix Web Datablade 4.1x - Page Request SQL Injection

source: https://www.securityfocus.com/bid/4496/info Informix is an enterprise database distributed and maintained by IBM. The Web Datablade Module for Informix SQL, dynamically generates HTML content based on Database data. Web Datablade is available for Apache, IIS, and Netscape web servers, and...

CVE-2000-0551

The file transfer mechanism in Danware NetOp 6.0 does not provide authentication, which allows remote attackers to access and modify arbitrary files...

lpd hostname authentication bypassed with spoofed DNS

Overview The line printer daemon enables various clients to share printers over a network. There exists a flaw in the authentication method in this daemon that permits remote access to the server. Description A vulnerability exists in the line printer daemon lpd shipped with the lpr package for...

Cisco PIX Firewall Authentication Denial of Service Vulnerability

...

CVE-1999-1176

Buffer overflow in cidentd ident daemon allows local users to gain root privileges via a long line in the .authlie script...

BUZ.CH Security Advisory 200109041: Inter7 vpopmail DB pw problem

--------------------------------------------------------------------- BUZ.CH Security Advisory 200109041: Inter7 vpopmail DB pw problem --------------------------------------------------------------------- Subject: local password problem in vpopmail when installed with MySQL module and all other...

CVE-2001-0504

Vulnerability in authentication process for SMTP service in Microsoft Windows 2000 allows remote attackers to use incorrect credentials to gain privileges and conduct activities such as mail relaying...

CVE-2001-0484

Tektronix PhaserLink 850 does not require authentication for access to configuration pages such as nclsubjects.shtml and nclitems.shtml, which allows remote attackers to modify configuration information and cause a denial of service by accessing the pages...

GroupWise 5.5 User Mailbox Authentication Vulnerability

Advisory ID Internal CORE-2001-0626 GroupWise 5.5 User Mailbox Authentication Vulnerability Core Security Advisory https://www.coresecurity.com Date Published: 2001-06-26 Advisory ID: CORE-2001-0626 Bugtraq ID: None currently assigned. CVE Name: None currently assigned. Title: GroupWise 5.5 User...

Cerberus FTP Server 1.x - Buffer Overflow (Denial of Service) (PoC)

source: https://www.securityfocus.com/bid/2901/info erberus FTP Server is a free, multi-threaded file transfer utility for Microsoft Windows systems. There is a buffer overflow in Cerberus FTP Server. The problem occurs when a user is attempting to authenticate. If the login fieldsusername,...

CVE-2001-0484

Tektronix PhaserLink 850 does not require authentication for access to configuration pages such as nclsubjects.shtml and nclitems.shtml, which allows remote attackers to modify configuration information and cause a denial of service by accessing the pages...