3629 matches found
Lotus Domino Web Server discloses IP address
Overview Lotus Domino Web server discloses its IP address to some HTTP requests. Description Lotus Domino can be coerced to reveal its IP address by sending it a crafted HTTP request. --- Impact Attackers can discover limited information about the numbering of the Domino server's network. ---...
CVE-2002-0570: Undefined Security Weakness
The encrypted loop device in Linux kernel 2.4.10 and earlier does not authenticate the entity that is encrypting data, which allows local users to modify encrypted data without knowing the key...
CVE-2002-0134
Telnet proxy in Avirt Gateway Suite 4.2 does not require authentication for connecting to the proxy system itself, which allows remote attackers to list file contents of the proxy and execute arbitrary commands via a "dos" command...
CVE-2001-1169: Undefined Security Weakness
keyinit in S/Key does not require authentication to initialize a one-time password sequence, which allows an attacker who has gained privileges to a user account to create new one-time passwords for use in other activities that may use S/Key authentication, such as sudo...
CVE-2000-0551
The CVE-2000-0551 entry concerns Danware NetOp 6.0, whose file transfer mechanism reportedly does not require authentication. This allows remote attackers to access and modify arbitrary files, per the description. The connected documents confirm the affected product and the underlying issue (unau...
CVE-2001-1006: Undefined Security Weakness
Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA does not encrypt sensitive files and relies solely on its password feature to restrict access, which allows an attacker to read the files using a different application...
Внедрение данных в tinc (data injection)
Протокол не защищает от вставки данных...
CVE-2001-0524: Undefined Security Weakness
eEye SecureIIS versions 1.0.3 and earlier does not perform length checking on individual HTTP headers, which allows a remote attacker to send arbitrary length strings to IIS, contrary to an advertised feature of SecureIIS versions 1.0.3 and earlier...
CVE-2001-0056: Undefined Security Weakness
The Cisco Web Management interface in routers running CBOS 2.4.1 and earlier does not log invalid logins, which allows remote attackers to guess passwords without detection...
CVE-2001-0133
CVE-2001-0133 affects Interscan VirusWall 3.6.x and earlier. The web administration interface reportedly does not use encryption, enabling remote attackers to obtain the administrator password by sniffing credentials sent during login or via setpasswd.cgi and other HTTP GET requests that transmit...
Two Holes in Sun Cluster 2.x
Hole 1 ------- Summary ------- Sun Cluster 2.x Sun Microsystems' commercial high-availability product for Solaris leaks potentially sensitive information to local or remote users. Specifics --------- In a standard Sun Cluster install, there is a service called clustmon that runs on port 12000. It...
CVE-1999-0791: Undefined Security Weakness
Hybrid Network cable modems do not include an authentication mechanism for administration, allowing remote attackers to compromise the system through the HSMP protocol...
CVE-2000-0757: Undefined Security Weakness
The sysgen service in Aptis Totalbill does not perform authentication, which allows remote attackers to gain root privileges by connecting to the service and specifying the commands to be executed...
CVE-2000-0278
The SalesLogix Eviewer allows remote attackers to cause a denial of service by accessing the URL for the slxweb.dll administration program, which does not authenticate the user...
CVE-2000-0068
daynad program in Intel InBusiness E-mail Station does not require authentication, which allows remote attackers to modify its configuration, delete files, or read mail...
CVE-2000-0058: Undefined Security Weakness
Network HotSync program in Handspring Visor does not have authentication, which allows remote attackers to retrieve email and files...
CVE-1999-0587: Undefined Security Weakness
A WWW server is not running in a restricted file system, e.g. through a chroot, thus allowing access to system-critical data...
CVE-1999-0361: Undefined Security Weakness
NetWare version of LaserFiche stores usernames and passwords unencrypted, and allows administrative changes without logging...