CVE-1999-1393

Control Panel "Password Security" option for Apple Powerbooks allows attackers with physical access to the machine to bypass the security by booting it with an emergency startup disk and using a disk editor to modify the on/off toggle or password in the aaaaaaaAPWD file, which is normally...

CVE-1999-1174

The CVE-1999-1174 entry describes a physical-access vulnerability in Iomega ZIP-100 drives: an attacker can bypass password protection by inserting a disk with a known password, allowing the drive to power down, swapping to the target disk, and then using the known password to access it. The root...

CVE-1999-1393: Undefined Security Weakness

Control Panel "Password Security" option for Apple Powerbooks allows attackers with physical access to the machine to bypass the security by booting it with an emergency startup disk and using a disk editor to modify the on/off toggle or password in the aaaaaaaAPWD file, which is normally...

CVE-1999-1025: Undefined Security Weakness

CDE screen lock program screenlock on Solaris 2.6 does not properly lock an unprivileged user's console session when the host is an NIS+ client, which allows others with physical access to login with any string...

CVE-2001-1116

Identix BioLogon 2.03 and earlier does not lock secondary displays on a multi-monitor system running Windows 98 or ME, which allows an attacker with physical access to the system to bypass authentication through a secondary display...

CVE-2001-0157

Debugging utility in the backdoor mode of Palm OS 3.5.2 and earlier allows attackers with physical access to a Palm device to bypass access restrictions and obtain passwords, even if the system lockout mechanism is enabled...

CVE-2001-0157: Undefined Security Weakness

Debugging utility in the backdoor mode of Palm OS 3.5.2 and earlier allows attackers with physical access to a Palm device to bypass access restrictions and obtain passwords, even if the system lockout mechanism is enabled...

xlock.txt

Hi, I came across a nice xlock bug when i noticed i couldnt log in again as user after i "locked" my windowmaker screen. Xlock afaik is suid by default to read passwords from /etc/shadow. I removed most suidbits on my Slackware 7.1 box. Also the suidbit on my xlock has been removed. Problem: Any...

CVE-2001-0048

The "Configure Your Server" tool in Microsoft 2000 domain controllers installs a blank password for the Directory Service Restore Mode, which allows attackers with physical access to the controller to install malicious programs, aka the "Directory Service Restore Mode Password" vulnerability...

CVE-2001-0048

The "Configure Your Server" tool in Microsoft 2000 domain controllers installs a blank password for the Directory Service Restore Mode, which allows attackers with physical access to the controller to install malicious programs, aka the "Directory Service Restore Mode Password" vulnerability...

CVE-2001-0048: Undefined Security Weakness

The "Configure Your Server" tool in Microsoft 2000 domain controllers installs a blank password for the Directory Service Restore Mode, which allows attackers with physical access to the controller to install malicious programs, aka the "Directory Service Restore Mode Password" vulnerability...

CVE-2000-1008: Undefined Security Weakness

PalmOS 3.5.2 and earlier uses weak encryption to store the user password, which allows attackers with physical access to the Palm device to decrypt the password and gain access to the device...

CVE-2000-1008

PalmOS 3.5.2 and earlier uses weak encryption to store the user password, allowing attackers with physical access to decrypt the password and gain access to the device. The vulnerability affects the password storage mechanism and is exploitable only with local access; no exploit details or mitiga...

mandrake.urpmi.txt

Local Exploit Issue with: /usr/bin/urpmi The urpmi executable perl script root@localhost /root ls -al /usr/bin/urpmi -rwsr-x--- 1 root urpmi 9352 Apr 4 2000 /usr/bin/urpmi This requires an account in the urpmi group. Possibly physical access to the box as well. On Mandrake 7.1 the package urpmi w...

CVE-2000-0777: Undefined Security Weakness

The password protection feature of Microsoft Money can store the password in plaintext, which allows attackers with physical access to the system to obtain the password, aka the "Money Password" vulnerability...

Palm OS 3.5.2 - Weak Encryption

source: https://www.securityfocus.com/bid/1715/info Palm OS is shipped with a security feature which enables a user to set password protection on various applications.The HotSync process allows a user to connect to a machine on the network through their Palm device. This process involves the devi...

@stake iKey 1000 Security Advisory

@Stake Inc. L0pht Research Labs www.atstake.com www.L0pht.com Security Advisory Advisory Name: iKey 1000 Administrator Access and Data Compromise Release Date: July 20, 2000 Application: N/A Platform: Rainbow Technologies' iKey 1000 Severity: An attacker can login as administrator and access all...

Локальная уязвимость iKey

Мастер-ключ хранится в EPROM, может быть извлечен или подменен при наличии физического доступа к устройству...

CVE-2000-0427

CVE-2000-0427 affects the Aladdin Knowledge Systems eToken device. Attackers with physical access can reset the PIN in the device’s EEPROM , allowing access to sensitive information without the owner’s PIN. The provided documents do not specify affected models/firmware versions or any vendor-issu...

CVE-2000-0427

The Aladdin Knowledge Systems eToken device allows attackers with physical access to the device to obtain sensitive information without knowing the PIN of the owner by resetting the PIN in the EEPROM...