2165 matches found
CVE-2002-1863
Iomega Network Attached Storage NAS A300U, and possibly other models, does not allow the FTP service to be disabled, which allows local users to access home directories via FTP even when access to all shared directories have been disabled...
CVE-2002-1955
Iomega NAS A300U uses cleartext LANMAN authentication when mounting CIFS/SMB drives, which allows remote attackers to perform a man-in-the-middle attack...
CVE-2002-1949
The Network Attached Storage NAS Administration Web Page for Iomega NAS A300U transmits passwords in cleartext, which allows remote attackers to sniff the administrative password...
CVE-2001-0620
CVE-2001-0620 affects iPlanet Calendar Server 5.0p2 and earlier. The vulnerability arises because the configuration file stores the Netscape Admin Server (NAS) LDAP credential in cleartext with insecure permissions, allowing a local attacker to obtain the administrator username and password, gain...