125 matches found
CVE-2002-1629
Multi-Tech ProxyServer products MTPSR1-100, MTPSR1-120, MTPSR1-202ST, MTPSR2-201, and MTPSR3-200 ship with a null password, which allows remote attackers to gain administrative privileges via Telnet or HTTP...
Windows FTP Server NULL Administrator Password
The remote server is incorrectly configured with a NULL password for the user 'Administrator' and has FTP enabled. This script was written by Keith Young See the Nessus Scripts License for details Changes by Tenable: - Revised plugin title 2/04/2009 include"compat.inc"; ifdescription scriptid1116...
CVE-2000-1209
The "sa" account is installed with a default null password on 1 Microsoft SQL Server 2000, 2 SQL Server 7.0, and 3 Data Engine MSDE 1.0, including third party packages that use these products such as 4 Tumbleweed Secure Mail MMS 5 Compaq Insight Manager, and 6 Visio 2000, which allows remote...
CVE-2000-1209
The CVE-2000-1209 issue affects Microsoft SQL Server 2000, SQL Server 7.0, and Data Engine (MSDE) 1.0 where the sa account is installed with a default null password. This enables remote attackers to gain privileges and was exploited by worms such as Voyager Alpha Force and Spida, with third-party...
CVE-2000-1209
The "sa" account is installed with a default null password on 1 Microsoft SQL Server 2000, 2 SQL Server 7.0, and 3 Data Engine MSDE 1.0, including third party packages that use these products such as 4 Tumbleweed Secure Mail MMS 5 Compaq Insight Manager, and 6 Visio 2000, which allows remote...
CVE-2002-0667
CVE-2002-0667 concerns Pingtel xpressa SIP phones (model PX-1) running software 1.2.5–1.2.7.4. The issue arises from a default administrator password set to null (admin user), enabling remote and local administrative access, manipulation of SIP signaling, and potential takeover of the device. Con...
CVE-2001-0269
pamldap authentication module in Solaris 8 allows remote attackers to bypass authentication via a NULL password...
CVE-2001-0269
The vulnerability CVE-2001-0269 affects the pam_ldap authentication module in Solaris 8, where remote attackers can bypass authentication by providing a NULL password. This leads to complete compromise of confidentiality, integrity, and availability for affected sessions. The available documents ...
CVE-2001-0968
Knox Arkeia server 4.2 (and possibly other versions) installs its root user with a null password by default, enabling privilege escalation for local and remote users. The available documents describe the vulnerable condition but do not specify patches or fixes. No explicit exploit details or reme...
CVE-2001-0968
Knox Arkeia server 4.2, and possibly other versions, installs its root user with a null password by default, which allows local and remote users to gain privileges...
CVE-2002-0007
CGI.pl in Bugzilla before 2.14.1, when using LDAP, allows remote attackers to obtain an anonymous bind to the LDAP server via a request that does not include a password, which causes a null password to be sent to the LDAP server...
CVE-2001-0269
pamldap authentication module in Solaris 8 allows remote attackers to bypass authentication via a NULL password...
Дырка в Solaris (pam_ldap authorization)
Можно ввести NULL - пароль вместо правильного...
Solaris 8 pam_ldap.so.1 module broken
I looked through the archives back to November 2000 and didn't see this mentioned. Apologies if it's there and I missed it. Sunsolve has bugid 4384816 on file regarding this issue. It's been known since 06-Nov-2000 with a status of 'Evaluated' but no workaround or other information, helpful or...
CVE-2000-0784
sshd program in the Rapidstream 2.1 Beta VPN appliance has a hard-coded "rsadmin" account with a null password, which allows remote attackers to execute arbitrary commands via ssh...
CVE-2000-0784
sshd program in the Rapidstream 2.1 Beta VPN appliance has a hard-coded "rsadmin" account with a null password, which allows remote attackers to execute arbitrary commands via ssh...
CVE-1999-0506
A Windows NT domain user or administrator account has a default, null, blank, or missing password...
EUVD-1999-0517
A NETBIOS/SMB share password is the default, null, or missing...
CVE-1999-0502
CVE-1999-0502 describes Unix accounts with default, null, blank or missing passwords. The documented impact is partial confidentiality, integrity, and availability compromise (authentication is none, allowing network access). CVSS base score 7.5 (HIGH) with network attack vector and low complexit...