1687 matches found
Business Objects WebIntelligence DoS
It's possible to lock out administrator's account with unsuccessfull authentication attempts...
CVE-2005-3286
The FWDRV driver in Kerio Personal Firewall 4.2 and Server Firewall 1.1.1 allows local users to cause a denial of service crash by setting the PAGENOACCESS or PAGEGUARD protection on the Page Environment Block PEB, which triggers an exception, aka the "PEB lockout vulnerability."...
CVE-2001-1570
Windows XP with fast user switching and account lockout enabled allows local users to deny user account access by setting the fast user switch to the same user self multiple times, which causes other accounts to be locked out...
CVE-2001-1570
Technical details about CVE-2001-1570 are not publicly available in the provided connected documents. Monitor for updates.
WebEOC account lock-out policy may allow a denial-of-service
Overview WebEOC account lock out policy may allow a remote attacker to disable user and system accounts resulting in a denial-of-service condition. Description WebEOC is a web-based crisis information management application that provides functions to gather, coordinate, and disseminate informatio...
CVE-2000-1217
Microsoft Windows 2000 before SP2, in a non-Windows 2000 domain using NTLM and with cached credentials, is vulnerable to Domain Account Lockout: local users can bypass lockout and make unlimited login attempts. Affected component is the account lockout mechanism; root cause relates to how local c...
CVE-2005-0570
profile.php in PunBB 1.2.1 allows remote attackers to cause a denial of service account lockout by setting the user's password to NULL...
GLSA-200406-12 : Webmin: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200406-12 Webmin: Multiple vulnerabilities Webmin contains two security vulnerabilities. One allows any user to view the configuration of any module and the other could allow an attacker to lock out a valid user by sending an...
GLSA-200406-15 : Usermin: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200406-15 Usermin: Multiple vulnerabilities Usermin contains two security vulnerabilities. One fails to properly sanitize email messages that contain malicious HTML or script code and the other could allow an attacker to lock out ...
CVE-2004-0583
The account lockout functionality in 1 Webmin 1.140 and 2 Usermin 1.070 does not parse certain character strings, which allows remote attackers to conduct a brute force attack to guess user IDs and passwords...
CVE-2004-0583
The account lockout functionality in 1 Webmin 1.140 and 2 Usermin 1.070 does not parse certain character strings, which allows remote attackers to conduct a brute force attack to guess user IDs and passwords...
[SECURITY] [DSA 526-1] New webmin packages fix multiple vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 526-1 [email protected] http://www.debian.org/security/ Matt Zimmerman July 3rd, 2004 http://www.debian.org/security/faq -...
CVE-2004-0583
The account lockout functionality in 1 Webmin 1.140 and 2 Usermin 1.070 does not parse certain character strings, which allows remote attackers to conduct a brute force attack to guess user IDs and passwords...
CVE-2004-0583
The CVE-2004-0583 entry concerns Webmin 1.140 and Usermin 1.070 where the account lockout function fails to parse certain character strings, enabling remote brute-force attempts to guess user IDs and passwords. Root cause: input parsing flaw in the account lockout logic. Impact is limited to unau...
Usermin: Multiple vulnerabilities
Background Usermin is a web-based administration tool for Unix. It supports a wide range of user applications including configuring mail forwarding, setting up SSH or reading mail. Description Usermin contains two security vulnerabilities. One fails to properly sanitize email messages that contai...
[SNS Advisory No.75] Webmin/Usermin Account Lockout Bypass Vulnerability
---------------------------------------------------------------------- SNS Advisory No.75 Webmin/Usermin Account Lockout Bypass Vulnerability Problem first discovered on: Sun, 11 Apr 2004 Published on: Fri, 11 Jun 2004 ---------------------------------------------------------------------- Overvie...
Webmin: Multiple vulnerabilities
Background Webmin is a web-based administration tool for Unix. It supports a wide range of applications including Apache, DNS, file sharing and others. Description Webmin contains two security vulnerabilities. One allows any user to view the configuration of any module and the other could allow a...
CVE-2002-0453
The account lockout capability in Oblix NetPoint 5.2 and earlier only locks out users once for the specified lockout period, which makes it easier for remote attackers to conduct brute force password guessing by waiting until the lockout period ends, then guessing passwords without being locked o...
CVE-2002-0453
The account lockout capability in Oblix NetPoint 5.2 and earlier only locks out users once for the specified lockout period, which makes it easier for remote attackers to conduct brute force password guessing by waiting until the lockout period ends, then guessing passwords without being locked o...
CVE-2002-0453
CVE-2002-0453 affects Oblix NetPoint 5.2 and earlier. The vulnerability is in the account lockout mechanism, which only locks out a user once for the specified period. This allows remote attackers to repeat brute-force password guessing by waiting for the lockout window to reset and attempting pa...