CVE-2001-1106: Undefined Security Weakness

The default configuration of Sambar Server 5 and earlier uses a symmetric key that is compiled into the binary program for encrypting passwords, which could allow local users to break all user passwords by cracking the key or modifying a copy of the sambar program to call the decryption procedure...

CVE-2002-1739

Alt-N Technologies Mdaemon 5.0 through 5.0.6 uses a weak encryption algorithm to store user passwords, which allows local users to crack passwords...

PT-2002-2461 · Alt N Technologies · Mdaemon

Name of the Vulnerable Software and Affected Versions: Alt-N Technologies Mdaemon versions 5.0 through 5.0.6 Description: The issue concerns the use of a weak encryption algorithm to store user passwords, allowing local users to crack passwords. Recommendations: For versions 5.0 through 5.0.6,...

Cracking OpenVMS passwords with John the Ripper

I have written a patch for John the Ripper http://www.openwall.com/john/ to allow cracking OpenVMS Vax and Alpha passwords. The patch is based on code from Shawn Clifford, Davide Casale and Mario Ambrogetti. The sources are in http://jl.gailly.net/security/john-VMS-patch.tar.gz A README file is a...

CVE-2002-0917

CGIScript.net csPassword.cgi stores .htpasswd files under the web document root, which could allow remote authenticated users to download the file and crack the passwords of other users...

CVE-2002-0705: Undefined Security Weakness

The Web Reports Server for SurfControl SuperScout WebFilter stores the "scwebusers" username and password file in a web-accessible directory, which allows remote attackers to obtain valid usernames and crack the passwords...

CVE-2002-0917

CGIScript.net csPassword.cgi stores .htpasswd files under the web document root, which could allow remote authenticated users to download the file and crack the passwords of other users...

CVE-2002-0917: Undefined Security Weakness

CGIScript.net csPassword.cgi stores .htpasswd files under the web document root, which could allow remote authenticated users to download the file and crack the passwords of other users...

CVE-2002-0426

VPN Server module in Linksys EtherFast BEFVP41 Cable/DSL VPN Router before 1.40.1 reduces the key lengths for keys that are supplied via manual key entry, which makes it easier for attackers to crack the keys...

CVE-2002-0426: Undefined Security Weakness

VPN Server module in Linksys EtherFast BEFVP41 Cable/DSL VPN Router before 1.40.1 reduces the key lengths for keys that are supplied via manual key entry, which makes it easier for attackers to crack the keys...

CVE-2001-1275

CVE-2001-1275 affects MySQL prior to 3.23.31. The SHOW GRANTS vulnerability lets any MySQL account obtain the encrypted administrator password from mysql.user, potentially enabling privilege escalation via password cracking. A fix is available in MySQL 3.23.31 (Mandrake MDKSA-2001:014-1). Upgrade...

CVE-2001-1275: Undefined Security Weakness

MySQL before 3.23.31 allows users with a MySQL account to use the SHOW GRANTS command to obtain the encrypted administrator password from the mysql.user table and possibly gain privileges via password cracking...

CVE-2001-1017

The CVE-2001-1017 issue affects the rmuser utility in FreeBSD 4.2 and 4.3. During the update of the master.passwd file, a copy is created with world-readable permissions, enabling local users to read the copied file while rmuser runs. This could allow access to password hashes and potential passw...

CVE-1999-1074: Undefined Security Weakness

Webmin before 0.5 does not restrict the number of invalid passwords that are entered for a valid username, which could allow remote attackers to gain privileges via brute force password cracking...

NetWin Authentication Module 3.0b password storage vulnerabilities / buffer overflows

NetWin Authentication Module 3.0b password storage vulnerabilities / buffer overflows AFFECTED SYSTEMS NWAuth module as used by DMail, SurgeFTP, others... cfr www.netwinsite.com I've tested SurgeFTP in particular The source code for NWAuth 2.0 can be found at...

CVE-2001-0195

The CVE-2001-0195 issue affects sash

CVE-2001-0195

sash before 3.4-4 in Debian GNU/Linux does not properly clone /etc/shadow, which makes it world-readable and could allow local users to gain privileges via password cracking...

CVE-2001-0195: Improper Preservation of Permissions

sash before 3.4-4 in Debian GNU/Linux does not properly clone /etc/shadow, which makes it world-readable and could allow local users to gain privileges via password cracking...

CVE-2001-0195

sash before 3.4-4 in Debian GNU/Linux does not properly clone /etc/shadow, which makes it world-readable and could allow local users to gain privileges via password cracking...

PT-2001-1424 · Sash · Sash

Name of the Vulnerable Software and Affected Versions: sash versions prior to 3.4-4 Description: The issue is related to the improper cloning of /etc/shadow, making it world-readable. This could allow local users to gain privileges via password cracking. Recommendations: For versions prior to...