2236 matches found
KPMG-2002018: Pointsec for PalmOS PIN disclosure
-------------------------------------------------------------------- Title: Pointsec for PalmOS PIN disclosure BUG-ID: 2002018 Released: 03rd May 2002 Discovered by: Laurens Binken, KPMG IRM, the Netherlands -------------------------------------------------------------------- Problem: ========...
CVE-2001-1170
AmTote International homebet program stores the homebet.log file in the homebet/ virtual directory, which allows remote attackers to steal account and PIN numbers...
CVE-2001-1170
The CVE concerns AmTote International’s homebet program. The vulnerability arises because homebet.log is stored in the homebet/ virtual directory, enabling remote attackers to access sensitive data and potentially disclose account and PIN numbers. The description does not specify affected version...
CVE-2001-1520
Xircom REX 6000 allows local users to obtain the 10 digit PIN by starting a serial monitor, connecting to the personal digital assistant PDA via Rextools, and capturing the cleartext PIN...
Xircom REX6000 PDA Password Retrieval
Security Advisory TITLE : XIRCOM REX6000 PDA Password Retrieval REVISION : 1 CLASS : Password Retrieval VENDOR : Xircom now Intel CREDIT : Daniel Jonsson [email protected] STATUS : PLATFORMS : VULNERABLE : Xircom REX6000 MicroPDA CREATED : 2001-11-23 LAST UPDATED : 2001-11-23 VENDOR CONTACT : No...
Слабая защита в XIRCOM REX6000 (unauthorized access)
PIN, защищающий устройство, может быть получен через последовательный порт...
Несанкционированный доступ в Homebet (unauthorized access)
Для авторизации пользователя применяется 4-х символьный pin-код. Сообщения об ошибке для неправильного пин-кода и имени пользователя различаются. Лог-файл содержащий всю информацию доступен через веб...
CVE-2001-1170
AmTote International homebet program stores the homebet.log file in the homebet/ virtual directory, which allows remote attackers to steal account and PIN numbers...
Amtote Homebet - Account Information Brute Force
Amtote Homebet - Account Information Brute Force source: https://www.securityfocus.com/bid/3371/info Homebet is an internet based betting application that is developed by Amtote International. A vulnerability exists in Homebet which could enable a non-registered user to confirm the validity of...
AmTote Homebet - World Accessible Log
AmTote Homebet - World Accessible Log source: https://www.securityfocus.com/bid/3370/info AmTote Homebet is an Internet-based account wagering interface. Homebet stores all account and corresponding PIN numbers in the homebet.log file stored in the Homebet virtual directory. On a default...
Amtote Homebet - Account Information Brute Force
source: https://www.securityfocus.com/bid/3371/info Homebet is an internet based betting application that is developed by Amtote International. A vulnerability exists in Homebet which could enable a non-registered user to confirm the validity of possible legitimate users and their PIN numbers...
AmTote Homebet - World Accessible Log
source: https://www.securityfocus.com/bid/3370/info AmTote Homebet is an Internet-based account wagering interface. Homebet stores all account and corresponding PIN numbers in the homebet.log file stored in the Homebet virtual directory. On a default installation, the homebet.log file is world...
Дырка в Prospero 1.3.5 CGI
Многочисленные локальные дырки, недостаточно длинные пин-коды и т.д...
SafeWord e.Id Trivial PIN Brute-Force Vulnerability
Subject: SafeWord e.Id Trivial PIN Brute-Force Vulnerability BUGTRAQ ID: 2105 Published: December 14, 2000 Updated: December 14, 2000 Remote: No Local: Yes Vulnerable Systems: Secure Computing e.iD Authenticator for Palm 2.0 - Palm Palm OS 3.5.2 - Palm Palm OS 3.3 Non-Vulnerable Systems: Summary:...
Уязвимость SafeWord e.Id
При исопльзовании токена генерируется короткий PIN, который может быть подобран методом перебора...
Secure Computing e.iD Authenticator for Palm 2.0 - PIN Brute Force
Secure Computing e.iD Authenticator for Palm 2.0 - PIN Brute Force source: https://www.securityfocus.com/bid/2105/info Summary: An attacker that obtains access to the "sceiddb.pdb" file, part of Secure Computing's e.iD Authenticator for Palm, can determine the user's PIN. Problem Description:...
Secure Computing e.iD Authenticator for Palm 2.0 - PIN Brute Force
source: https://www.securityfocus.com/bid/2105/info Summary: An attacker that obtains access to the "sceiddb.pdb" file, part of Secure Computing's e.iD Authenticator for Palm, can determine the user's PIN. Problem Description: Secure Computing's SafeWord is a system of authentication services tha...
Уязвимость в ActiveCard
PIN-код генерируется по время-зависимому алгоритму, что позволяет предсказать значительную часть цифрового кода...
CVE-2000-0427
The Aladdin Knowledge Systems eToken device allows attackers with physical access to the device to obtain sensitive information without knowing the PIN of the owner by resetting the PIN in the EEPROM...