VP-ASP shopping cart software.

NOTE: Please Just ignore the tags, there just notes ect. to make a .txt document a little more readable, or not. short Several security issues in the VP-ASP shopping cart software dotPath Information Disclosure Vulnerability. dotInsecure perrmissions on configuration file. /short synopsis -Defaul...

Oracle 9iAS default configuration uses well-known default passwords

Overview Oracle Database Server version 9iAS installs with up to 160 distinct default login accounts. The usernames and passwords for these have been made publicly available and could be used by an attacker to gain access to an Oracle server. Description Depending on the components chosen at...

Security BugWare : Alcatel 4400 PBX hack

w w w . s e c u r i t y b u g w a r e . o r g A D V I S O R Y Playing around with ALCATEL 4400 PBX SYSTEM AFFECTED ================ Alcatel 4400 Pbx PROBLEM ======== A little audit of an Alcatel 4400 pbx leads us to some interesting bugs : default passwords, many root accesses, DoS, halt. If you...

Многочисленные дырки в Alcatel 4400 PBX (multiple bugs)

Пароли по-умолчанию, предсказуемые номера TCP-последовательности, слабые разрешения на файлы и т.д...

CVE-2001-0645

Symantec/AXENT NetProwler 3.5.x contains several default passwords, which could allow remote attackers to 1 access to the management tier via the "admin" password, or 2 connect to a MySQL ODBC from the management tier using a blank password...

CVE-2001-0645

CVE-2001-0645 affects Symantec/AXENT NetProwler 3.5.x. The provided materials indicate the presence of several default passwords that could permit an attacker to (1) access the management tier via the admin password, and (2) connect to a MySQL ODBC from the management tier using a blank password....

CVE-2001-0645

Symantec/AXENT NetProwler 3.5.x contains several default passwords, which could allow remote attackers to 1 access to the management tier via the "admin" password, or 2 connect to a MySQL ODBC from the management tier using a blank password...

3Com Superstack 3 Switch Multiple Default Accounts

The 3Com Superstack 3 switch has the default passwords set. The attacker could use these default passwords to gain remote access to your switch and then reconfigure the switch. These passwords could also be potentially used to gain sensitive information about your network from the switch. This...

Cayman gateways ship with null administrative and user level passwords

Overview Cayman gateways ship without a default password on the admin and user accounts. As long as the gateway is not addressable via the WAN, this can only be accessed and set by anyone on the LAN side. With admin access, the gateway settings can be configured by an intruder. Description Cayman...

IPC@Chip Security

Sentry Research Labs www.sentry-labs.de.vu product: IPC@Chip Beck GmbH vendor informed: 21th of May status: unanswered Note: The demonstration tool and a german version there is also an english download version of this report is available form our website. Siberian...

Дырки при установке Interchange (default password)

При установке создаются пользователи с пустыми паролями...

IBM DB2 - Universal Database for Linux 6.1/Windows NT 6.1 Known Default Password

source: https://www.securityfocus.com/bid/2068/info IBM DB2 Universal Database is a distributed database application. DB2 Universal Database contains a default username and password that would enable a user access to the database. During the installation of DB2, the administrator is not prompted ...

sonata.teleconf.txt

Vulnerability Report For Voyant Technologies Sonata Conferencing product. Larry W. Cashdollar Vapid Labs Date Published: 10/31/2000 Advisory ID: 10132000-01 CVE CAN: None currently assigned. Title: Multiple Vulnerabilities found in Sonata teleconferencing Application. Class: Design Error Remotely...

CVE-2000-0109

The CVE-2000-0109 entry corresponds to Standard & Poor’s ComStock MultiCSP Client Site Processor (MCSP) systems that ship with several accounts with no passwords or easily guessable defaults. Connected sources confirm this weakness on the MultiCSP implementation; Nessus notes default/blank passwo...

PT-2000-1097 · Comstock · Comstock Multicsp Client Site Processor System

Name of the Vulnerable Software and Affected Versions: ComStock MultiCSP Client Site Processor system affected versions not specified Description: The issue concerns the presence of accounts with no passwords or easily guessable default passwords in the ComStock MultiCSP system. Recommendations: ...

PT-1998-1092 · Microsoft · Windows Nt

Name of the Vulnerable Software and Affected Versions: Windows NT affected versions not specified Description: The issue concerns Windows NT domain user or administrator accounts that have default, null, blank, or missing passwords. Recommendations: For all affected versions, ensure that strong,...

PT-1998-1094 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue concerns accounts on network devices such as routers, firewalls, or other similar equipment that have default, null, blank, or missing passwords. This poses a significant...

PT-1997-1143 · Microsoft · Windows Nt

Name of the Vulnerable Software and Affected Versions: Windows NT affected versions not specified Description: The issue concerns Windows NT local user or administrator accounts that have default, null, blank, or missing passwords. Recommendations: For all affected versions, ensure that all local...