CVE-2000-1209

The "sa" account is installed with a default null password on 1 Microsoft SQL Server 2000, 2 SQL Server 7.0, and 3 Data Engine MSDE 1.0, including third party packages that use these products such as 4 Tumbleweed Secure Mail MMS 5 Compaq Insight Manager, and 6 Visio 2000, which allows remote...

CVE-2002-0667

CVE-2002-0667 concerns Pingtel xpressa SIP phones (model PX-1) running software 1.2.5–1.2.7.4. The issue arises from a default administrator password set to null (admin user), enabling remote and local administrative access, manipulation of SIP signaling, and potential takeover of the device. Con...

CVE-2001-0269

The vulnerability CVE-2001-0269 affects the pam_ldap authentication module in Solaris 8, where remote attackers can bypass authentication by providing a NULL password. This leads to complete compromise of confidentiality, integrity, and availability for affected sessions. The available documents ...

CVE-2001-0269

pamldap authentication module in Solaris 8 allows remote attackers to bypass authentication via a NULL password...

CVE-2001-0968

Knox Arkeia server 4.2 (and possibly other versions) installs its root user with a null password by default, enabling privilege escalation for local and remote users. The available documents describe the vulnerable condition but do not specify patches or fixes. No explicit exploit details or reme...

CVE-2001-0968

Knox Arkeia server 4.2, and possibly other versions, installs its root user with a null password by default, which allows local and remote users to gain privileges...

CVE-2002-0007

CGI.pl in Bugzilla before 2.14.1, when using LDAP, allows remote attackers to obtain an anonymous bind to the LDAP server via a request that does not include a password, which causes a null password to be sent to the LDAP server...

CVE-2001-0269

pamldap authentication module in Solaris 8 allows remote attackers to bypass authentication via a NULL password...

Solaris 8 pam_ldap.so.1 module broken

I looked through the archives back to November 2000 and didn't see this mentioned. Apologies if it's there and I missed it. Sunsolve has bugid 4384816 on file regarding this issue. It's been known since 06-Nov-2000 with a status of 'Evaluated' but no workaround or other information, helpful or...

Дырка в Solaris (pam_ldap authorization)

Можно ввести NULL - пароль вместо правильного...

CVE-2000-0784

sshd program in the Rapidstream 2.1 Beta VPN appliance has a hard-coded "rsadmin" account with a null password, which allows remote attackers to execute arbitrary commands via ssh...

CVE-2000-0784

sshd program in the Rapidstream 2.1 Beta VPN appliance has a hard-coded "rsadmin" account with a null password, which allows remote attackers to execute arbitrary commands via ssh...

CVE-1999-0502

A Unix account has a default, null, blank, or missing password...

EUVD-1999-0517

A NETBIOS/SMB share password is the default, null, or missing...

CVE-1999-0506

A Windows NT domain user or administrator account has a default, null, blank, or missing password...

CVE-1999-0502

CVE-1999-0502 describes Unix accounts with default, null, blank or missing passwords. The documented impact is partial confidentiality, integrity, and availability compromise (authentication is none, allowing network access). CVSS base score 7.5 (HIGH) with network attack vector and low complexit...

CVE-1999-0508

CVE-1999-0508 concerns a default/blank/missing password on accounts of network devices (routers, firewalls, etc.). The related documents describe an attacker gaining access locally via a device account with such a password, leading to partial impact on confidentiality, integrity, and availability...

CVE-1999-0519

CVE-1999-0519 describes a Windows SMB/NETBIOS issue where a share password is default, null, or missing, enabling NULL session authentication bypass. Public sources (NVD, Red Hat, SUSE, OpenVAS/Nessus entries) consistently describe an authentication bypass risk tied to SMB/NETBIOS NULL sessions. ...

CVE-1999-1001

Cisco Cache Engine is affected by a vulnerability that allows a remote attacker to gain access via a null username and password. The available documents confirm the issue but do not specify affected versions or a remediation. PT-1999-1520 notes that affected versions are not specified and that th...

CVE-1999-0506

A Windows NT domain user or administrator account has a default, null, blank, or missing password...