CVE-2002-0881

The CVE-2002-0881 entry affects Cisco IP Phone (VoIP) models 7910, 7940, and 7960. The underlying issue is the use of a default administrative password, enabling attackers with physical access to the phone to modify configuration settings. Connected documents corroborate the vulnerable components...

CVE-2002-0881

Cisco IP Phone VoIP models 7910, 7940, and 7960 use a default administrative password, which allows attackers with physical access to the phone to modify the configuration settings...

CVE-2002-0673

The enrollment process for Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 allows attackers with physical access to the phone to log out the current user and re-register the phone using MyPingtel Sign-In to gain remote access and perform unauthorized actions...

CVE-2002-0672

Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 allows attackers with physical access to restore the phone to factory defaults without authentication via a menu option, which sets the administrator password to null...

CVE-2002-0349

Tiny Personal Firewall TPF 2.0.15, under certain configurations, will pop up an alert to the system even when the screen is locked, which could allow an attacker with physical access to the machine to hide activities or bypass access restrictions...

SECURITY vulnerability in ECS-K7S5A(L) boards

A repost, my previous one seem to have failed. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SECURITY vulnerability in ECS-K7S5AL boards DESCRIPTION =========== The administrator-password set in the BIOS of the K7S5AL locks out BIOS-access from the console. However, it does not disable access to...

CVE-2002-0349

Tiny Personal Firewall TPF 2.0.15, under certain configurations, will pop up an alert to the system even when the screen is locked, which could allow an attacker with physical access to the machine to hide activities or bypass access restrictions...

CVE-1999-1452

GINA in Windows NT 4.0 allows attackers with physical access to display a portion of the clipboard of the user who has locked the workstation by pasting CTRL-V the contents into the username prompt...

CVE-1999-1432

Power management Powermanagement on Solaris 2.4 through 2.6 does not start the xlock process until after the sys-suspend has completed, which allows an attacker with physical access to input characters to the last active application from the keyboard for a short period after the system is...

CVE-1999-1297

cmdtool in OpenWindows 3.0 and XView 3.0 in SunOS 4.1.4 and earlier allows attackers with physical access to the system to display unechoed characters such as those from password prompts via the L2/AGAIN key...

CVE-1999-1297

Affected software : cmdtool in OpenWindows 3.0 and XView 3.0 running on SunOS 4.1.4 and earlier. Vulnerability : local attackers with physical access can cause the system to display unechoed characters (e.g., password prompts) via the L2/AGAIN key. Root cause / vector : the prompt characters can ...

CVE-1999-1174

ZIP drive for Iomega ZIP-100 disks allows attackers with physical access to the drive to bypass password protection by inserting a known disk with a known password, waiting for the ZIP drive to power down, manually replacing the known disk with the target disk, and using the known password to...

CVE-2001-0856

Common Cryptographic Architecture CCA in IBM 4758 allows an attacker with physical access to the system and CombineKeyParts permissions, to steal DES and 3DES keys by using a brute force attack to create a 3DES exporter key...

CVE-2001-0856

The CVE-2001-0856 entry concerns IBM 4758 cryptographic hardware (CCA). The affected component is the CCA functionality used to protect DES/3DES keys. According to the description, an attacker with physical access and Combine_Key_Parts permissions can perform a brute-force attack to create a 3DES...

CVE-2001-0659

Buffer overflow in IrDA driver providing infrared data exchange on Windows 2000 allows attackers who are physically close to the machine to cause a denial of service reboot via a malformed IrDA packet...

CVE-1999-1400

The Economist screen saver 1999 with the "Password Protected" option enabled allows users with physical access to the machine to bypass the screen saver and read files by running Internet Explorer while the screen is still locked...

CVE-1999-1393

Control Panel "Password Security" option for Apple Powerbooks allows attackers with physical access to the machine to bypass the security by booting it with an emergency startup disk and using a disk editor to modify the on/off toggle or password in the aaaaaaaAPWD file, which is normally...

CVE-1999-1174

ZIP drive for Iomega ZIP-100 disks allows attackers with physical access to the drive to bypass password protection by inserting a known disk with a known password, waiting for the ZIP drive to power down, manually replacing the known disk with the target disk, and using the known password to...

CVE-1999-1174

The CVE-1999-1174 entry describes a physical-access vulnerability in Iomega ZIP-100 drives: an attacker can bypass password protection by inserting a disk with a known password, allowing the drive to power down, swapping to the target disk, and then using the known password to access it. The root...

CVE-2001-1116

Identix BioLogon 2.03 and earlier does not lock secondary displays on a multi-monitor system running Windows 98 or ME, which allows an attacker with physical access to the system to bypass authentication through a secondary display...