CVE-2007-3232

The IBM TotalStorage DS400 with firmware 4.15 uses a blank password for the 1 root, 2 user, 3 manager, 4 administrator, and 5 operator accounts, which allows remote attackers to gain login access via certain Linux daemons, including a telnet daemon on a nonstandard port, tcp/6000...

CVE-2007-3232

The IBM TotalStorage DS400 with firmware 4.15 uses a blank password for the 1 root, 2 user, 3 manager, 4 administrator, and 5 operator accounts, which allows remote attackers to gain login access via certain Linux daemons, including a telnet daemon on a nonstandard port, tcp/6000...

CVE-2007-3232: Undefined Security Weakness

The IBM TotalStorage DS400 with firmware 4.15 uses a blank password for the 1 root, 2 user, 3 manager, 4 administrator, and 5 operator accounts, which allows remote attackers to gain login access via certain Linux daemons, including a telnet daemon on a nonstandard port, tcp/6000...

CVE-2007-2554: Undefined Security Weakness

Associated Press AP Newspower 4.0.1 and earlier uses a default blank password for the MySQL root account, which allows remote attackers to insert or modify news articles via shows.tblscript...

Input validation

The Rediff Toolbar 2.0 ActiveX control in redifftoolbar.dll allows remote attackers to cause a denial of service via unspecified manipulations, possibly involving improper initialization or blank arguments...

DEBIAN-CVE-2007-0844

The authviakey function in pamssh.c in pamssh before 1.92, when the allowblankpassphrase option is disabled, allows remote attackers to bypass authentication restrictions and use private encryption keys requiring a blank passphrase by entering a non-blank passphrase...

wget FTP client code DoS

Multiple blank 220 FTP responses on FTP SYST command cause application crash...

CVE-2006-3597: Undefined Security Weakness

passwd before 1:4.0.13 on Ubuntu 6.06 LTS leaves the root password blank instead of locking it when the administrator selects the "Go Back" option after the final "Installation complete" message and uses the main menu, which causes the password to be zeroed out in the installer's memory...

Default credentials

MySQL Manager in Apple Mac OS X 10.3.9 and 10.4.6, when setting up a new MySQL database server, does not use the "New MySQL root password" that is provided, which causes the MySQL root password to be blank and allows local users to gain full privileges to that database...

CVE-2006-2346: Undefined Security Weakness

vpopmail 5.4.14 and 5.4.15, with cleartext passwords enabled, allows remote attackers to authenticate to an account that does not have a cleartext password set by using a blank password to 1 SMTP AUTH or 2 APOP...

Cisco VG248 login password is blank

The remote host is a Cisco VG248 with a blank password. SPDX-FileCopyrightText: 2005 Rick McCloskey Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only Cisco VG248 with a blank password nas...

CVE-2006-0789

Certain unspecified Kyocera printers have a default "admin" account with a blank password, which allows remote attackers to access an administrative menu via a telnet session...

CVE-2006-0789

CVE-2006-0789 affects unspecified Kyocera printers that ship with a default admin account with a blank password. The vulnerability enables remote unauthenticated access to an administrative menu via telnet. No specific affected models, firmware versions, or root-cause details are provided in the ...

CVE-2006-0789

Certain unspecified Kyocera printers have a default "admin" account with a blank password, which allows remote attackers to access an administrative menu via a telnet session...

CVE-2005-3678: Improper Input Validation

Google Talk before 1.0.0.76, with email notification enabled, allows remote attackers to cause a denial of service connection reset via email with a blank sender...

CVE-2005-3344

The default installation of Horde 3.0.4 contains an administrative account with a blank password, which allows remote attackers to gain access...

CVE-2005-3344

The default installation of Horde 3.0.4 contains an administrative account with a blank password, which allows remote attackers to gain access...

CVE-2005-3344

The default installation of Horde 3.0.4 contains an administrative account with a blank password, which allows remote attackers to gain access...

CVE-2005-3595

By default Microsoft Windows XP Home Edition installs with a blank password for the Administrator account, which allows remote attackers to gain control of the computer...

CVE-2005-3344

The CVE-2005-3344 issue affects Horde Groupware/Horde3 where the default installation ships with an administrative account that has a blank password. This enables unauthenticated remote access to administrative functions, potentially compromising the system. Debian’s DSA-884-1 advisory fixes Hord...