178 matches found
Security Bulletin MS02-003
---------------------------------------------------------------------- Title: Exchange 2000 System Attendant Incorrectly Sets Remote Registry Permissions Date: February 07, 2002 Software: Exchange Server 2000 Impact: Less Secure Default Settings Max Risk: Low Bulletin: MS02-003 Microsoft...
ОБращение к реестру через IE5.5 (javascript execution)
Несколько ActiveX компонентов могут записывать разделы реестра...
Two issues: Blackboard CourseInfo 4.0 stores admin password in clear text; strange settings on the winreg key.
Hi, Russ. This is a big mess; I've got two different things for your consideration. Perhaps you can help me out. First of all, Blackboard CourseInfo 4.0 stores a local administrator username and password in clear text in the registry. Unless an administrator has hardened their registry against...
Microsoft Windows SMB Registry : SFCDisable Key Permission Weakness
The registry key HKLM\SOFTWARE\Microsoft\Windows NT\WinLogon\SFCDisable has its value set to a value other than 0 or 4. Any value other than 0 or 4 disables the Windows File Protection, which allows any user on the remote host to view / modify any file he wants. This probably means that this host...
Security Bulletin (MS00-040)
Patch Available for "Remote Registry Access Authentication" Vulnerability Originally posted: June 08, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Microsoftr Windows NT 4.0. Under certain conditions, the vulnerability could be used to cause a...
Computer Associates eTrust Intrusion Detection 1.4.1.13 - Weak Encryption
Computer Associates eTrust Intrusion Detection 1.4.1.13 - Weak Encryption source: https://www.securityfocus.com/bid/1341/info A weak encryption scheme exists in Computer Associates eTrust Intrusion Detection System formerly known as SessionWall-3 password which authorizes users to view and...
Computer Associates eTrust Intrusion Detection 1.4.1.13 - Weak Encryption
source: https://www.securityfocus.com/bid/1341/info A weak encryption scheme exists in Computer Associates eTrust Intrusion Detection System formerly known as SessionWall-3 password which authorizes users to view and configure the application's registry settings. Provided that either a remote or...
Microsoft Windows SMB Registry Remotely Accessible
It was possible to access the remote Windows Registry using the login / password combination used for the Windows local checks SMB tests. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10400; scriptversion"1.55"; scriptsetattributeattribute:"pluginmodificationdate",...
CVE-1999-0562
The registry in Windows NT can be accessed remotely by users who are not administrators...
EUVD-1999-0549
The registry in Windows NT can be accessed remotely by users who are not administrators...
Microsoft Internet Explorer 4/5 - ActiveX 'Eyedog' Remote Overflow
Microsoft Internet Explorer 4.0/5.0 for Windows 95/Windows NT 4/Windows 2000/Windows 95/Windows 98 ActiveX "Eyedog" Vulnerability source: https://www.securityfocus.com/bid/619/info The Eyedog ActiveX control is marked 'safe for scripting' although it permits registry access and other information...
Microsoft Internet Explorer 45 - ActiveX Eyedog Remote Overflow
Microsoft Internet Explorer 45 - ActiveX Eyedog Remote Overflow Microsoft Internet Explorer 4.0/5.0 for Windows 95/Windows NT 4/Windows 2000/Windows 95/Windows 98 ActiveX "Eyedog" Vulnerability source: https://www.securityfocus.com/bid/619/info The Eyedog ActiveX control is marked 'safe for...
nt4.index.server.2.0.txt
Date: Tue, 23 Mar 1999 23:40:55 -0000 From: Mnemonix To: [email protected] Subject: Index Server 2.0 and the Registry When Microsoft's Index Server 2.0 is installed on NT 4 with Internet Information Server 4 it opens a new "AllowedPath" into the Windows NT Registry. Administrators...
msie.5.0.hta.txt
Date: Tue, 8 Jun 1999 08:41:54 -0400 From: "Noller, Jesse" To: [email protected] Subject: IE 5.0 and HTAs Security hole Good day: I recently set up an NT box, with just the basic setup, no other modifications, other than SP5, and an installation of Internet Explorer 5.0. I was...
triactive.passwd.txt
Date: Fri, 19 Feb 1999 17:35:45 -0500 From: Trevor Gryffyn To: [email protected] Subject: Plaintext Password in Tractive's Remote Manager Software A pretty minor thing, but thought I'd bring it up anyway. I hope it hasn't already been reported. Software: Triactive's Remote Management Software...
Qbik WinGate 3.0 - Registry
Qbik WinGate 3.0 - Registry // source: https://www.securityfocus.com/bid/511/info WinGate stores encrypted passwords in the registry, in a subkey where Everyone has Read access by default. The encryption scheme is weak, and therefore anyone can get and decrypt them. include "stdafx.h" include...
CVE-1999-1556
Microsoft SQL Server 6.5 uses weak encryption for the password for the SQLExecutiveCmdExec account and stores it in an accessible portion of the registry, which could allow local users to gain privileges by reading and decrypting the CmdExecAccount value...