CVE-2005-0427

The ebuild of Webmin before 1.170-r3 on Gentoo Linux includes the encrypted root password in the miniserv.users file when building a tbz2 of the webmin package, which allows remote attackers to obtain and possibly crack the encrypted password...

[Full-Disclosure] NetSupport School Pro: Password encryption weaknesses

Vendor : NetSupport URL : http://www.netsupport-inc.com/ Version : Invision NetSupport School Pro Risk : Password protection weakness Description: NetSupport School, market leading training tool for the modern classroom featuring full student remote control, application & internet monitoring,...

Microsoft SQL Server < 7 Local Privilege Escalation

Based on its version number, the remote host may be vulnerable to a local exploit wherein an authenticated user can obtain and crack SQL usernames and passwords from the registry. An attacker may use this flaw to elevate their privileges on the local database. This alert might be a false positive...

CVE-2002-0426

CVE-2002-0426 affects the Linksys EtherFast BEFVP41 Cable/DSL VPN Router (VPN Server module) prior to firmware version 1.40.1. The issue: the router reduces key lengths for keys entered manually, making it easier to crack keys. The NVD entry notes a network attack vector with low attack complexit...

sadmind-howto.txt

rpc.sadmind 27/02/2000 ------------------------ The bug rpc.sadmind has been reported a long time ago. But there has never been a manual for it. So i decided to explain how to exploit the bug. First of all i would recommend to use the sadmind brute forcer for the sploit files sadmindex-sparc.c an...

CVE-2000-0275

CRYPTOCard CryptoAdmin for PalmOS uses weak encryption to store a user PIN in the .PDB. An attacker with access to the .PDB can crack the PIN and generate valid PT-1 tokens. Affected product: CryptoAdmin for PalmOS. Root cause: weak PIN storage encryption. Impact: local attacker could access toke...

novell.remote.nlm.passwd.txt

Date: Fri, 9 Apr 1999 02:24:45 -0700 From: [email protected] To: [email protected] Subject: New Novell Remote.NLM Password Decryption Algorithm with Exploit I am providing this message in hopes that it will contribute to the general knowledge of others. Please distribute this document fully...