PT-2001-1613 · Lightwave · Lightwave Consoleserver 3200

Name of the Vulnerable Software and Affected Versions: Lightwave ConsoleServer 3200 Description: The issue allows remote attackers to conduct brute force password guessing because the system does not disconnect users after unsuccessful login attempts. Recommendations: For Lightwave ConsoleServer...

PT-2001-2463 · Beck Ipc Gmbh · Ipc@Chip

Name of the Vulnerable Software and Affected Versions: Beck IPC GmbH IPC@CHIP affected versions not specified Description: The issue allows remote attackers to conduct brute force password guessing attacks due to the lack of delay or disconnection when bad passwords are entered. This makes it...

CVE-2001-0056

The Cisco Web Management interface in routers running CBOS 2.4.1 and earlier does not log invalid logins, which allows remote attackers to guess passwords without detection...

Strip Password Generator 0.30.40.5 - Limited Password-Space

Strip Password Generator 0.30.40.5 - Limited Password-Space // source: https://www.securityfocus.com/bid/2567/info Strip is a password generation utility made freely available by Zetetic Enterprises. Strip is a PalmOS based application designed to generate and store important passwords. A problem...

Strip Password Generator 0.3/0.4/0.5 - Limited Password-Space

// source: https://www.securityfocus.com/bid/2567/info Strip is a password generation utility made freely available by Zetetic Enterprises. Strip is a PalmOS based application designed to generate and store important passwords. A problem with Strip makes it possible for a user that has attained a...

CVE-2001-0056

The Cisco Web Management interface in routers running CBOS 2.4.1 and earlier does not log invalid logins, which allows remote attackers to guess passwords without detection...

CVE-2001-0088

common.inc.php in phpWebLog 0.4.2 does not properly initialize the $CONF array, which inadvertently sets the password to a single character, allowing remote attackers to easily guess the SiteKey and gain administrative privileges to phpWebLog...

CVE-2000-0937

Samba Web Administration Tool SWAT in Samba 2.0.7 does not log login attempts in which the username is correct but the password is wrong, which allows remote attackers to conduct brute force password guessing attacks...

CVE-2000-0937

The CVE concerns the Samba Web Administration Tool (SWAT) shipped with Samba 2.0.7, where login attempts that have a correct username but wrong password are not logged. This omission can enable brute-force password guessing by an attacker. Connected sources corroborate that SWAT in Samba 2.0.7 is...

CVE-2000-1033

Serv-U FTP Server allows remote attackers to bypass its anti-hammering feature by first logging on as a valid user possibly anonymous and then attempting to guess the passwords of other users...

Дырка в WhoWhere Webmail (comm.lycos.com, angelfire.com, eudoramail.com)

Можно угадать имя файла с вложением на сервере...

CVE-2000-1037

Check Point Firewall-1 session agent 3.0 through 4.1 generates different error messages for invalid user names versus invalid passwords, which allows remote attackers to determine valid usernames and guess a password via a brute force attack...

BB4 Big Brother Network Monitor 1.5 d2 - 'bb-hist.sh?HISTFILE' File Existence Disclosure

source : https://www.securityfocus.com/bid/1971/info Big Brother Network Monitor is a robust, feature rich network monitoring package produced by BB4 Technologies. A problem exists that can allow remote account guessing. The problem occurs in the Common Gateway Interface package included with Big...

BB4 Big Brother Network Monitor 1.5 d2 - bb-hist.sh?HISTFILE File Existence Disclosure

BB4 Big Brother Network Monitor 1.5 d2 - bb-hist.sh?HISTFILE File Existence Disclosure source : https://www.securityfocus.com/bid/1971/info Big Brother Network Monitor is a robust, feature rich network monitoring package produced by BB4 Technologies. A problem exists that can allow remote account...

Samba 2.0.7 - SWAT Logging Failure

Samba 2.0.7 - SWAT Logging Failure // source: https://www.securityfocus.com/bid/1873/info The Samba software suite is a collection of programs that implements the SMB protocol for unix systems, allowing you to serve files and printers to Windows, NT, OS/2 and DOS clients. This protocol is sometim...

Samba 2.0.7 - SWAT Logging Failure

// source: https://www.securityfocus.com/bid/1873/info The Samba software suite is a collection of programs that implements the SMB protocol for unix systems, allowing you to serve files and printers to Windows, NT, OS/2 and DOS clients. This protocol is sometimes also referred to as the LanManag...

CVE-2000-0118

The CVE-2000-0118 entry concerns the Red Hat Linux su program: when the su process is killed before its timeout, failed password guesses aren’t logged, enabling local brute-force password guessing. The affected component is the su utility; the root cause is failure to log failed attempts due to p...

rlogin Service Detection

The rlogin service is running on the remote host. This service is vulnerable since data is passed between the rlogin client and server in cleartext. A man-in-the-middle attacker can exploit this to sniff logins and passwords. Also, it may allow poorly authenticated logins without passwords. If th...

rsh Service Detection

The rsh service is running on the remote host. This service is vulnerable since data is passed between the rsh client and server in cleartext. A man-in-the-middle attacker can exploit this to sniff logins and passwords. Also, it may allow poorly authenticated logins without passwords. If the host...

ssh-2.0.12.brute.force.txt

Date: Wed, 9 Jun 1999 15:51:54 +0200 From: [email protected] To: [email protected] Subject: ssh advirsory Aleph ... Sorry if it is an old bug ... i have tested a bug in ssh-2.0.12. any remote attacker can guess real account in the machine Details when a ssh client connects to the daemo...