Serena TeamTrack 6.1.1 - Remote Authentication Bypass

source: https://www.securityfocus.com/bid/10770/info It has been reported that Serena TeamTrack is affected by remote authentication bypass vulnerability. This issue is due to a design error that allows unauthenticated users to access sensitive scripts. Successful exploitation of this issue will...

Serena TeamTrack 6.1.1 - Remote Authentication Bypass

Serena TeamTrack 6.1.1 - Remote Authentication Bypass source: https://www.securityfocus.com/bid/10770/info It has been reported that Serena TeamTrack is affected by remote authentication bypass vulnerability. This issue is due to a design error that allows unauthenticated users to access sensitiv...

CVE-2004-0590

The CVE-2004-0590 entry affects FreeS/WAN and related IPsec implementations (OpenS/WAN, FreeS/WAN derivatives, Super-FreeS/WAN, and strongSwan). The root cause described across connected docs is bugs in the verify_x509cert() certificate validation, allowing remote attackers to authenticate using ...

CVE-2004-0590: Undefined Security Weakness

FreeS/WAN 1.x and 2.x, and other related products including superfreeswan 1.x, openswan 1.x before 1.0.6, openswan 2.x before 2.1.4, and strongSwan before 2.1.3, allows remote attackers to authenticate using spoofed PKCS7 certificates in which a self-signed certificate identifies an alternate...

LinBit Technologies LINBOX Officeserver - Remote Authentication Bypass

source: https://www.securityfocus.com/bid/10010/info It has been reported that LINBOX is prone to a remote authentication bypass vulnerability. This issue is due to a design error that would allow access to web based administration scripts without proper authorization. This issue may allow...

VocalTec VGW4/8 Telephony Gateway - Remote Authentication Bypass

source: https://www.securityfocus.com/bid/9876/info It has been reported that the VGW4/8 Telephony Gateway is prone to a remote authentication bypass vulnerability via its web configuration tool. The problem is due to a design error in the application that allows a user to access configuration...

VocalTec VGW48 Telephony Gateway - Remote Authentication Bypass

VocalTec VGW48 Telephony Gateway - Remote Authentication Bypass source: https://www.securityfocus.com/bid/9876/info It has been reported that the VGW4/8 Telephony Gateway is prone to a remote authentication bypass vulnerability via its web configuration tool. The problem is due to a design error ...

CVE-2003-1207

Crob FTP Server 3.5.1 allows remote authenticated users to cause a denial of service crash via a dir command with a large number of "." characters followed by a "/" string...

CVE-2003-0686: Undefined Security Weakness

Buffer overflow in PAM SMB module pamsmb 1.1.6 and earlier, when authenticating to a remote service, allows remote attackers to execute arbitrary code...

CVE-2003-0332

The ISAPI extension in BadBlue 1.7 through 2.2, and possibly earlier versions, modifies the first two letters of a filename extension after performing a security check, which allows remote attackers to bypass authentication via a filename with a .ats extension instead of a .hts extension...

CVE-2003-0332

The ISAPI extension in BadBlue 1.7 through 2.2, and possibly earlier versions, modifies the first two letters of a filename extension after performing a security check, which allows remote attackers to bypass authentication via a filename with a .ats extension instead of a .hts extension...

CVE-2003-0215

SQL injection vulnerability in bttlxeForum 2.0 beta 3 and earlier allows remote attackers to bypass authentication via the 1 username and 2 password fields, and possibly other fields...

Kerio Personal Firewall 2.1.x - Remote Authentication Packet Buffer Overflow (2)

Kerio Personal Firewall 2.1.x - Remote Authentication Packet Buffer Overflow 2 // source: https://www.securityfocus.com/bid/7180/info A buffer-overflow vulnerability has been discovered in Kerio Personal Firewall. The problem occurs during the administration authentication process. An attacker...

Kerio Personal Firewall 2.1.x - Remote Authentication Packet Buffer Overflow (2)

// source: https://www.securityfocus.com/bid/7180/info A buffer-overflow vulnerability has been discovered in Kerio Personal Firewall. The problem occurs during the administration authentication process. An attacker could exploit this vulnerability by forging a malicious packet containing an...

Kerio Personal Firewall 2.1.x - Remote Authentication Packet Buffer Overflow (1)

source: https://www.securityfocus.com/bid/7180/info A buffer-overflow vulnerability has been discovered in Kerio Personal Firewall. The problem occurs during the administration authentication process. An attacker could exploit this vulnerability by forging a malicious packet containing an excessi...

Kerio Personal Firewall 2.1.x - Remote Authentication Packet Buffer Overflow (1)

Kerio Personal Firewall 2.1.x - Remote Authentication Packet Buffer Overflow 1 source: https://www.securityfocus.com/bid/7180/info A buffer-overflow vulnerability has been discovered in Kerio Personal Firewall. The problem occurs during the administration authentication process. An attacker could...

DEBIAN-CVE-2002-1477

graphs.php in Cacti before 0.6.8 allows remote authenticated Cacti administrators to execute arbitrary commands via shell metacharacters in the title during edit mode...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS. The Key Distribution Center KDC in Kerberos 5 krb5 1.2.7 and earlier allows remote, authenticated attackers to cause a denial of service crash on KDCs within the same realm using a certain protocol request that...

DEBIAN-CVE-2003-0072

The Key Distribution Center KDC in Kerberos 5 krb5 1.2.7 and earlier allows remote, authenticated attackers to cause a denial of service crash on KDCs within the same realm using a certain protocol request that causes an out-of-bounds read of an array aka "array overrun"...

DEBIAN-CVE-2003-0058

MIT Kerberos V5 Key Distribution Center KDC before 1.2.5 allows remote authenticated attackers to cause a denial of service crash on KDCs within the same realm via a certain protocol request that causes a null dereference...