Solaris 2.6, 7, 8

Hello, Solaris 2.6, 7, and 8 /bin/login has a vulnerability involving the environment variable TTYPROMPT. This vulnerability has already been reported to BugTraq and a patch has been released by Sun. However, a very simple exploit, which does not require any code to be compiled by an attacker,...

DEBIAN-CVE-2001-1507

OpenSSH before 3.0.1 with Kerberos V enabled does not properly authenticate users, which could allow remote attackers to login unchallenged...

PT-2001-2592 · Openssh +1 · Openssh +1

Name of the Vulnerable Software and Affected Versions: OpenSSH versions prior to 3.0.1 Description: The issue concerns improper user authentication when Kerberos V is enabled. This could potentially allow remote attackers to login without being challenged. Recommendations: For versions prior to...

Microsoft Windows 2000 Telnet Service searches all trusted domains for user accounts

Overview The Microsoft Windows 2000 Telnet Service contains a vulnerability that allows remote attackers to log in using domain accounts without providing a specific domain name. Description The Microsoft Windows 2000 Telnet Service allows users to establish connections using either local account...

Security Advisory: FreeBSD-SA-00:69.telnetd

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:69 Security Advisory FreeBSD, Inc. Topic: telnetd allows remote system resource consumption. Category: core Module: telnetd Announced: 2000-11-14 Credits: Jouko Pynnonen...

(SRADV00004) Remote and local vulnerabilities in pam_mysql

================================================= Secure Reality Pty Ltd. Security Advisory 4 SRADV00004 http://www.securereality.com.au ================================================= Title Remote and local vulnerabilities in pammysql Released 26/10/2000 Vulnerable All versions of pammysql 0.4...

Conectiva 4.x/5.x / RedHat 6.x - pam_console Remote User

source: https://www.securityfocus.com/bid/1513/info There is a vulnerability in the Linux pamconsole module that could allow an attacker to remotely reboot the workstation or perform other actions limited to local users. If a workstation is configured to use a display manager xdm, gdm, kdm, etc...

qnx crypt comprimised

the crypt function for qnx turned out to a bit mixer, not a hash function. It's now possible to extract plaintext from the hashes. On a related note, all IOpeners running qnx use the same root password. Telnetd is running, and allows remote login as root. This is a huge security hole, as you can...

CVE-1999-0651

The rsh/rlogin service is running...

PT-1999-1245 · Rlogin +1 · Rlogin +1

Name of the Vulnerable Software and Affected Versions: rsh/rlogin affected versions not specified Description: The issue is related to the rsh/rlogin service being active. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...