799 matches found
CVE-2002-0303
CVE-2002-0303 affects Novell GroupWise 6 when using LDAP authentication and the Post Office has a blank username and password. The vulnerability allows an attacker to log in without a password and gain privileges of other users. Root cause described in the public description is an authentication ...
Microsoft SQL Server sa Account Default Blank Password
The remote instance of MS SQL / SQL Server has the default 'sa' account enabled without any password. An attacker may leverage this flaw to execute commands against the remote host, as well as read the content of any databases it might have. %NASLMINLEVEL 70300 this script attempts to log in to a...
Oracle Database Listener Program (tnslsnr) Service Blank Password
The remote Oracle Listener Program tnslsnr has no password assigned. An attacker may use this fact to shut it down arbitrarily, thus preventing legitimate users from using it. %NASLMINLEVEL 70300 oracletnslsnrsecurity.nasl - NASL script to do a TNS STATUS command against the Oracle tnslsnr and gr...
Vulnerability in Novell Netware
The information in this advisory was supplied by Chris Hughes [email protected]. This security advisory is not endorsed by Security-Focus.com. Vulnerability in Novell Netware Date Published: 03/08/01 Advisory ID: n/a Bugtraq ID: 2446 CVE CAN: None currently assigned. Title: Novell Netware Print...
WinVNC 3.3.x
So, you use WinVNC and Windows NT4 Workstation/Server...? During the InstallShield setup utility, it creates the registry key: HKEYLOCALMACHINESoftwareORLWinVNC3 which is used to store all of WinVNC's default settings. By default, Administrator and SYSTEM have full control, and Everybody has...
MS-SQL 'sa' user exploit code
Hi BugTraq-ers, It has come to light that it is now common knowledge that MS-SQL has a blank 'sa' password by default. This seems to affect a lot of servers on the internet. Since this knowledge has been made public by others, I'll release my program 'linsql' linux only -- ports anyone? which can...
Tumbleweed Worldsecure (MMS) BLANK 'sa' account password vulnerability
I've recently discovered the following vulnerability: Product: Tumbleweed Messaging Management System MMS Formerly Worldtalk Worldsecure http://www.tumbleweed.com/solutions/products/mmsproducts Version: 4.3 - 4.5 all builds Description: Product uses Microsoft's MSDE Database engine which is a...
CVE-2000-0159
HP Ignite-UX does not save /etc/passwd when it creates an image of a trusted system, which can set the password field to a blank and allow an attacker to gain privileges...
CVE-1999-0502
CVE-1999-0502 describes Unix accounts with default, null, blank or missing passwords. The documented impact is partial confidentiality, integrity, and availability compromise (authentication is none, allowing network access). CVSS base score 7.5 (HIGH) with network attack vector and low complexit...
CVE-1999-0504
CVE-1999-0504 describes a Windows NT local account with a default, null, blank, or missing password. Public references note exploitation paths via Windows SMB/PSEXEC‑style mechanisms and remote command execution tooling, with related Metasploit modules referencing the CVE when using an administra...
CVE-1999-0366
CVE-1999-0366 concerns Windows NT 4.0 SP4. Affected component: network shares authentication; root cause: null NT hash value enables access with a blank password. Impact stated as PARTIAL confidentiality, integrity, and availability. Exploitation details are not provided in the connected document...
CVE-1999-0366
In some cases, Service Pack 4 for Windows NT 4.0 can allow access to network shares using a blank password, through a problem with a null NT hash value...
CVE-1999-0366
In some cases, Service Pack 4 for Windows NT 4.0 can allow access to network shares using a blank password, through a problem with a null NT hash value...
CVE-1999-0506
A Windows NT domain user or administrator account has a default, null, blank, or missing password...
PT-1998-1092 · Microsoft · Windows Nt
Name of the Vulnerable Software and Affected Versions: Windows NT affected versions not specified Description: The issue concerns Windows NT domain user or administrator accounts that have default, null, blank, or missing passwords. Recommendations: For all affected versions, ensure that strong,...
CVE-1999-0502
A Unix account has a default, null, blank, or missing password...
PT-1998-1090 · Unix · Unix
Name of the Vulnerable Software and Affected Versions: Unix affected versions not specified Description: The issue concerns a Unix account with a default, null, blank, or missing password. Recommendations: For all affected versions, ensure that strong, unique passwords are set for all Unix accoun...
PT-1997-1143 · Microsoft · Windows Nt
Name of the Vulnerable Software and Affected Versions: Windows NT affected versions not specified Description: The issue concerns Windows NT local user or administrator accounts that have default, null, blank, or missing passwords. Recommendations: For all affected versions, ensure that all local...
