Lucene search
+L

4127 matches found

CVE
CVE
•added 2005/02/06 5:00 a.m.•80 views

CVE-2005-0198

The CVE-2005-0198 entry corresponds to a logic error in the CRAM-MD5 authentication path of UW-IMAP/imap servers, allowing remote attackers to authenticate as arbitrary users when CRAM-MD5 is enabled. Multiple connected advisories (Debian OSV, Gentoo/OpenVAS, SuSE/NT) describe the same issue and ...

7.5CVSS6.7AI score0.05091EPSS
SaveExploits0References10Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/02/06 12:00 a.m.•4 views

CVE-2005-0198: Undefined Security Weakness

A logic error in the CRAM-MD5 code for the University of Washington IMAP UW-IMAP server, when Challenge-Response Authentication Mechanism with MD5 CRAM-MD5 is enabled, does not properly enforce all the required conditions for successful authentication, which allows remote attackers to authenticat...

7.5CVSS6AI score0.05091EPSS
SaveExploits0References1
exploitpack
exploitpack
•added 2004/07/05 12:00 a.m.•21 views

MySQL 4.15.0 - Authentication Bypass

MySQL 4.15.0 - Authentication Bypass source: https://www.securityfocus.com/bid/10654/info MySQL is prone to a vulnerability that may permit remote clients to bypass authentication. This is due to a logic error in the server when handling client-supplied length values for password strings...

0.6AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2004/07/05 12:00 a.m.•46 views

MySQL 4.1/5.0 - Authentication Bypass

source: https://www.securityfocus.com/bid/10654/info MySQL is prone to a vulnerability that may permit remote clients to bypass authentication. This is due to a logic error in the server when handling client-supplied length values for password strings. Successful exploitation will yield...

5.8AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2003/08/18 12:00 a.m.•4 views

CVE-2003-0177: Undefined Security Weakness

SGI IRIX 6.5.x through 6.5.20f, and possibly earlier versions, does not follow "-" entries in the /etc/group file, which may cause subsequent group membership entries to be processed inadvertently...

4.6CVSS5.8AI score0.00333EPSS
SaveExploits0References1
Exploit DB
Exploit DB
•added 2003/03/29 12:00 a.m.•316 views

Sendmail 8.11.6 - Address Prescan Memory Corruption

/ source: https://www.securityfocus.com/bid/7230/info A vulnerability in Sendmail may be exploited remotely to execute arbitrary code. The flaw is present in the 'prescan' procedure, which is used for processing email addresses in SMTP headers. This condition has been confirmed to be exploitable ...

10CVSS5.8AI score0.38786EPSS
SaveExploits2
Debian
Debian
•added 2000/11/10 12:00 a.m.•16 views

[SECURITY] New version of gnupg installed

------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Wichert Akkerman November 11, 2000 - ------------------------------------------------------------------------ Package: gnupg Debian-specific: no...

0.9AI score
SaveExploits0
Rows per page
Query Builder