2717 matches found
ralfchat12.txt
RALF'S CHAT V.12 - http://www.ralfchat.de Ralf's Chat is a free cgi based chat program. But Ralf's Chat has some awful bugs in it. I played myself with the CGI and discovered that the masterpassword is set by a default password called: mpw So, if someone else who carries on this chatedited the...
ISS ICEcap Default Password
The ICEcap package has a default login of 'iceman' with no password. An attacker may use this fact to log into the console and/or push false alerts on port 8082. In addition to this, an attacker may inject code in ICEcap v2.0.23 and below. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Than...
Проблемы с Piranha под RH Linux
Во-первых по-умолчанию имеется простой пароль "черного хода". Во вторых ошибки в скриптах позволяют выполнить любое приложение с привилегиями сервера...
piranha default password/exploit
Hi, In the interest of full disclosure I used an alias the last few times, let's see how this goes as me here are the details of the piranha vulnerability. RE: ISS Security Advisory iss.00-04-24.Piranha To summarize, piranha is a GUI tool for monitoring, configuring, and administering an LVS...
Piranha's RH6.2 default password
The 'piranha' package is installed on the remote host. This package, as it is distributed with Linux RedHat 6.2, comes with the login/password combination 'piranha/q' or 'piranha'/'piranha'. An attacker may use it to reconfigure your Linux Virtual Servers LVS. %NASLMINLEVEL 70300 C Tenable Networ...
ACC Tigris Access Terminal Configuration Disclosure
The remote router is an ACC Tigris Terminal Server. Some software versions on this router will allow an attacker to run the SHOW command without first providing authentication. An attacker could exploit this to read part of the router's configuration. In addition there is a 'public' account with ...
pocsag.txt
While playing with the ever fun tool Pocsag v2.05, I found something interesting. The client by default accepts connections on port 8000 with the password 'password' even if the TCP/IP Remote access on port xxxx box is unchecked. You can change the default port, however the client will still acce...
Pocsag POC32 Remote Service Default Password (password)
It is possible to log into the remote pocsag service and view the streams of decoded pager messages using the password 'password'. An attacker may use this problem to gain some knowledge about the computer user and then trick him by social engineering. C Tenable Network Security, Inc...
EUVD-1999-0517
A NETBIOS/SMB share password is the default, null, or missing...
CVE-2000-0038
CVE-2000-0038 concerns glFtpD (glftpd) software where a default glftpd user account exists with a default password and a UID of 0. The vulnerability is tied to this account’s privileged UID, enabling potential unauthorized access or privilege elevation. The PT-1999-1846 entry notes affected versi...
CVE-1999-0508
An account on a router, firewall, or other network device has a default, null, blank, or missing password...
CVE-1999-0677
CVE-1999-0677 affects the WebRamp web administration utility, with a default password that enables unauthorized access. The NVD entry reports a CVSSv2 base score of 7.5 (Network attack, Low attack complexity, No authentication required, Partial impact on confidentiality, integrity, and availabili...
CVE-1999-0502
CVE-1999-0502 describes a general security vulnerability where a Unix account or other network device account is configured with a default, null, blank, or missing password . This allows an attacker to gain unauthorized access to the system. Various scanner modules identify this issue across diff...
CVE-1999-0504
CVE-1999-0504 describes a Windows NT local account with a default, null, blank, or missing password. Public references note exploitation paths via Windows SMB/PSEXEC‑style mechanisms and remote command execution tooling, with related Metasploit modules referencing the CVE when using an administra...
CVE-1999-0502
A Unix account has a default, null, blank, or missing password...
CVE-2000-0038
glFtpD includes a default glftpd user account with a default password and a UID of 0...
CVE-1999-0508
CVE-1999-0508 concerns a default/blank/missing password on accounts of network devices (routers, firewalls, etc.). The related documents describe an attacker gaining access locally via a device account with such a password, leading to partial impact on confidentiality, integrity, and availability...
CVE-1999-0519
CVE-1999-0519 describes a Windows SMB/NETBIOS issue where a share password is default, null, or missing, enabling NULL session authentication bypass. Public sources (NVD, Red Hat, SUSE, OpenVAS/Nessus entries) consistently describe an authentication bypass risk tied to SMB/NETBIOS NULL sessions. ...
