PT-2002-2461 · Alt N Technologies · Mdaemon

Name of the Vulnerable Software and Affected Versions: Alt-N Technologies Mdaemon versions 5.0 through 5.0.6 Description: The issue concerns the use of a weak encryption algorithm to store user passwords, allowing local users to crack passwords. Recommendations: For versions 5.0 through 5.0.6,...

Cracking OpenVMS passwords with John the Ripper

I have written a patch for John the Ripper http://www.openwall.com/john/ to allow cracking OpenVMS Vax and Alpha passwords. The patch is based on code from Shawn Clifford, Davide Casale and Mario Ambrogetti. The sources are in http://jl.gailly.net/security/john-VMS-patch.tar.gz A README file is a...

CVE-2002-0917

CGIScript.net csPassword.cgi stores .htpasswd files under the web document root, which could allow remote authenticated users to download the file and crack the passwords of other users...

CVE-2002-0917

CGIScript.net csPassword.cgi stores .htpasswd files under the web document root, which could allow remote authenticated users to download the file and crack the passwords of other users...

CVE-2001-1275

CVE-2001-1275 affects MySQL prior to 3.23.31. The SHOW GRANTS vulnerability lets any MySQL account obtain the encrypted administrator password from mysql.user, potentially enabling privilege escalation via password cracking. A fix is available in MySQL 3.23.31 (Mandrake MDKSA-2001:014-1). Upgrade...

CVE-2001-1017

The CVE-2001-1017 issue affects the rmuser utility in FreeBSD 4.2 and 4.3. During the update of the master.passwd file, a copy is created with world-readable permissions, enabling local users to read the copied file while rmuser runs. This could allow access to password hashes and potential passw...

NetWin Authentication Module 3.0b password storage vulnerabilities / buffer overflows

NetWin Authentication Module 3.0b password storage vulnerabilities / buffer overflows AFFECTED SYSTEMS NWAuth module as used by DMail, SurgeFTP, others... cfr www.netwinsite.com I've tested SurgeFTP in particular The source code for NWAuth 2.0 can be found at...

CVE-2001-0195

sash before 3.4-4 in Debian GNU/Linux does not properly clone /etc/shadow, which makes it world-readable and could allow local users to gain privileges via password cracking...

CVE-2001-0195

The CVE-2001-0195 issue affects sash

CVE-2001-0195

sash before 3.4-4 in Debian GNU/Linux does not properly clone /etc/shadow, which makes it world-readable and could allow local users to gain privileges via password cracking...

PT-2001-1424 · Sash · Sash

Name of the Vulnerable Software and Affected Versions: sash versions prior to 3.4-4 Description: The issue is related to the improper cloning of /etc/shadow, making it world-readable. This could allow local users to gain privileges via password cracking. Recommendations: For versions prior to...

CVE-2000-0955

Cisco Virtual Central Office 4000 VCO/4K uses weak encryption to store usernames and passwords in the SNMP MIB, which allows an attacker who knows the community name to crack the password and gain privileges...

CVE-2000-0955

CVE-2000-0955 affects Cisco Virtual Central Office 4000 (VCO/4K). The issue is weak encryption used to store usernames and passwords in the SNMP MIB, enabling an attacker who knows the community name to crack credentials and gain privileges. According to the NVD entry, this yields a CVSS v2 base ...

Passwords sent via SSH encrypted with RC4 can be easily cracked

Overview Passwords sent using SSH with RC4 encryption can be easily cracked by an attacker who is able to capture and replay the session. This problem occurs for three reasons: SSH sessions can be replayed, the RC4 encryption algorithm has some specific weaknesses, and the SSH daemon provides too...

CVE-1999-0994

Windows NT with SYSKEY reuses the keystream that is used for encrypting SAM password hashes, allowing an attacker to crack passwords...

bindview.syskey.txt

BindView Security Advisory -------- Windows NT's SYSKEY feature Issue date: December 16, 1999 Contact: Todd Sabin Topic: Vulnerability in Windows NT's SYSKEY encryption Overview: SYSKEY does not fully protect the SAM from off-line attacks. Specifically, dictionary and brute-force password crackin...

CVE-1999-0994

Windows NT with SYSKEY reuses the keystream that is used for encrypting SAM password hashes, allowing an attacker to crack passwords...

Hughes Technologies Mini SQL (mSQL) 2.02.0.10 - Information Disclosure

Hughes Technologies Mini SQL mSQL 2.02.0.10 - Information Disclosure source: https://www.securityfocus.com/bid/591/info Under certain versions of Mini SQL, the w3-msql CGI script allows users to view directories which are set for private access via .htaccess files. W3-mSQL converts any form data...

Hughes Technologies Mini SQL (mSQL) 2.0/2.0.10 - Information Disclosure

source: https://www.securityfocus.com/bid/591/info Under certain versions of Mini SQL, the w3-msql CGI script allows users to view directories which are set for private access via .htaccess files. W3-mSQL converts any form data passed to a script into global Lite variables and these variables can...

FileGuard_308_Holes.txt

/ / / /\ / / / / / / / / / / / / / / / / / / / / / / / / / /////// / \\/ / . ../Macintosh Security/.. . / // Presents: Security Holes In FileGuard 3.0.8 Table Of Contents: - Introduction - Gaining Full Access - Launching The Cracked FileGuard Application - Password Protected Volumes - Disclaimer...