Xircom REX6000 PDA Password Retrieval

Security Advisory TITLE : XIRCOM REX6000 PDA Password Retrieval REVISION : 1 CLASS : Password Retrieval VENDOR : Xircom now Intel CREDIT : Daniel Jonsson [email protected] STATUS : PLATFORMS : VULNERABLE : Xircom REX6000 MicroPDA CREATED : 2001-11-23 LAST UPDATED : 2001-11-23 VENDOR CONTACT : No...

Слабая защита в XIRCOM REX6000 (unauthorized access)

PIN, защищающий устройство, может быть получен через последовательный порт...

Несанкционированный доступ в Homebet (unauthorized access)

Для авторизации пользователя применяется 4-х символьный pin-код. Сообщения об ошибке для неправильного пин-кода и имени пользователя различаются. Лог-файл содержащий всю информацию доступен через веб...

CVE-2001-1170

AmTote International homebet program stores the homebet.log file in the homebet/ virtual directory, which allows remote attackers to steal account and PIN numbers...

Amtote Homebet - Account Information Brute Force

source: https://www.securityfocus.com/bid/3371/info Homebet is an internet based betting application that is developed by Amtote International. A vulnerability exists in Homebet which could enable a non-registered user to confirm the validity of possible legitimate users and their PIN numbers...

AmTote Homebet - World Accessible Log

source: https://www.securityfocus.com/bid/3370/info AmTote Homebet is an Internet-based account wagering interface. Homebet stores all account and corresponding PIN numbers in the homebet.log file stored in the Homebet virtual directory. On a default installation, the homebet.log file is world...

AmTote Homebet - World Accessible Log

AmTote Homebet - World Accessible Log source: https://www.securityfocus.com/bid/3370/info AmTote Homebet is an Internet-based account wagering interface. Homebet stores all account and corresponding PIN numbers in the homebet.log file stored in the Homebet virtual directory. On a default...

Amtote Homebet - Account Information Brute Force

Amtote Homebet - Account Information Brute Force source: https://www.securityfocus.com/bid/3371/info Homebet is an internet based betting application that is developed by Amtote International. A vulnerability exists in Homebet which could enable a non-registered user to confirm the validity of...

Дырка в Prospero 1.3.5 CGI

Многочисленные локальные дырки, недостаточно длинные пин-коды и т.д...

Уязвимость SafeWord e.Id

При исопльзовании токена генерируется короткий PIN, который может быть подобран методом перебора...

SafeWord e.Id Trivial PIN Brute-Force Vulnerability

Subject: SafeWord e.Id Trivial PIN Brute-Force Vulnerability BUGTRAQ ID: 2105 Published: December 14, 2000 Updated: December 14, 2000 Remote: No Local: Yes Vulnerable Systems: Secure Computing e.iD Authenticator for Palm 2.0 - Palm Palm OS 3.5.2 - Palm Palm OS 3.3 Non-Vulnerable Systems: Summary:...

Secure Computing e.iD Authenticator for Palm 2.0 - PIN Brute Force

Secure Computing e.iD Authenticator for Palm 2.0 - PIN Brute Force source: https://www.securityfocus.com/bid/2105/info Summary: An attacker that obtains access to the "sceiddb.pdb" file, part of Secure Computing's e.iD Authenticator for Palm, can determine the user's PIN. Problem Description:...

Secure Computing e.iD Authenticator for Palm 2.0 - PIN Brute Force

source: https://www.securityfocus.com/bid/2105/info Summary: An attacker that obtains access to the "sceiddb.pdb" file, part of Secure Computing's e.iD Authenticator for Palm, can determine the user's PIN. Problem Description: Secure Computing's SafeWord is a system of authentication services tha...

Уязвимость в ActiveCard

PIN-код генерируется по время-зависимому алгоритму, что позволяет предсказать значительную часть цифрового кода...

CVE-2000-0427

The Aladdin Knowledge Systems eToken device allows attackers with physical access to the device to obtain sensitive information without knowing the PIN of the owner by resetting the PIN in the EEPROM...

Проблемы с eToken

При наличии физического доступа к устройству возможно подменить PIN/ключ доступа путем перепрошивки EPROM...

Aladdin eToken 3.3.3.x Hardware USB Key Private Data Extraction

@Stake Inc. L0pht Research Labs www.atstake.com www.L0pht.com Security Advisory Advisory Name: eToken Private Information Extraction and Physical Attack Release Date: May 4, 2000 Application: N/A Platform: Aladdin eToken USB Key 3.3.3.x Severity: An attacker can access all private information...

CVE-2000-0427

The Aladdin Knowledge Systems eToken device allows attackers with physical access to the device to obtain sensitive information without knowing the PIN of the owner by resetting the PIN in the EEPROM...

Aladdin Knowledge Systems eToken 3.3.3 - eToken PIN Extraction

source: https://www.securityfocus.com/bid/1170/info Alladin Knowledge Systems eToken is a USB smartcard-like device used for authentication, file integrity, and encryption. Access to the eToken device itself and entering the PIN number encoded in the eToken will grant authorization to a local use...

Aladdin Knowledge Systems eToken 3.3.3 - eToken PIN Extraction

Aladdin Knowledge Systems eToken 3.3.3 - eToken PIN Extraction source: https://www.securityfocus.com/bid/1170/info Alladin Knowledge Systems eToken is a USB smartcard-like device used for authentication, file integrity, and encryption. Access to the eToken device itself and entering the PIN numbe...