903 matches found
CVE-2006-2452
GNOME GDM 2.8, 2.12, 2.14, and 2.15, when the "face browser" feature is enabled, allows local users to access the "Configure Login Manager" functionality using their own password instead of the root password, which can be leveraged to gain additional privileges...
Default credentials
MySQL Manager in Apple Mac OS X 10.3.9 and 10.4.6, when setting up a new MySQL database server, does not use the "New MySQL root password" that is provided, which causes the MySQL root password to be blank and allows local users to gain full privileges to that database...
CVE-2006-0146
The server.php test script in ADOdb for PHP before 4.70, as used in multiple products including 1 Mantis, 2 PostNuke, 3 Moodle, 4 Cacti, 5 Xaraya, 6 PHPOpenChat, 7 MAXdev MD-Pro, and 8 MediaBeez, when the MySQL root password is empty, allows remote attackers to execute arbitrary SQL commands via...
CVE-2002-1809
The default configuration of the Windows binary release of MySQL 3.23.2 through 3.23.52 has a NULL root password, which could allow remote attackers to gain unauthorized root access to the MySQL database...
Exploit Labs Security Advisory 2005.2
------------------------------------------------------------ - EXPL-A-2005-002 exploitlabs.com Advisory 031 - ------------------------------------------------------------ - Samsung ADSL Modem - AFFECTED PRODUCTS ================= Samsung ADSL Modem Samgsung Eletronics http://www.samsung.com DETAI...
Knox Arkeia Network Backup multiple vulnerabilities
Database files and password file have weak security premossions by default. Default root password is empty. Buffer overflow...
CVE-2004-2004
The Live CD in SUSE LINUX 9.1 Personal edition is configured without a password for root, which allows remote attackers to gain privileges via SSH...
[Full-Disclosure] Confixx 2.0.xx SQL_Injections and reading MySQL Root-PW
SQL-Injections in Confixx 2.0.xx // reading MySQL Root-PW include"auth.php"; dbconnect$dbhost, $dbuser, $dbpass; $id = dbquery"select countdatenbank as mysql from mysqldatenbanken where kunde = '$PHPAUTHUSER'"; $werte = dbfetcharray$id; $mysql = $werte"mysql"; $id = dbquery"select dbname from...
CVE-2002-1440
The Gateway GS-400 server has a default root password of "0001n" that can not be changed via the administrative interface, which can allow attackers to gain root privileges...
CVE-2002-1440
CVE-2002-1440 : The Gateway GS-400 server ships with a default root password ā0001nā that cannot be changed via the administrative interface, enabling an attacker to obtain root privileges. The available documents confirm the existence of this default credential and the associated privilege escal...
CVE-2002-1440
The Gateway GS-400 server has a default root password of "0001n" that can not be changed via the administrative interface, which can allow attackers to gain root privileges...
CVE-2002-1809
The default configuration of the Windows binary release of MySQL 3.23.2 through 3.23.52 has a NULL root password, which could allow remote attackers to gain unauthorized root access to the MySQL database...
MySQL 3.20.323.22.x3.23.x - Null Root Password Weak Default Configuration (2)
MySQL 3.20.323.22.x3.23.x - Null Root Password Weak Default Configuration 2 / source: https://www.securityfocus.com/bid/5503/info MySQL is is an open source relational database project, and is available for a number of operating systems, including Microsoft Windows. A weak default configuration...
Shiva LanRover Blank Password
The Shiva LanRover has no password set for the root user account. An attacker is able to telnet to this system and gain access to any phone lines attached to this device. Additionally, the LanRover can be used as a relay point for further attacks via the telnet and rlogin functionality available...
IBM WebSphere on UNIX security alert !
====================================================================== IBM Websphere reveals system root password. Author : Heikki Tunkelo [email protected] Date : 13.12.2001 ====================================================================== === Brief description === It is possible...
CVE-2001-0968
Knox Arkeia server 4.2, and possibly other versions, installs its root user with a null password by default, which allows local and remote users to gain privileges...
ssh-brute.sh
!/usr/bin/expect -f simple expect exploit to brute force root's password via ssh without detection.. see CLABS200101 for info on this exploit. this is beerware, just buy me a beer at defcon if you like this. build your own dictionary, use at your own risk, no warranty, etc. [email protected]...
qnx crypt comprimised
the crypt function for qnx turned out to a bit mixer, not a hash function. It's now possible to extract plaintext from the hashes. On a related note, all IOpeners running qnx use the same root password. Telnetd is running, and allows remote login as root. This is a huge security hole, as you can...
RedHat Linux 6.0 - Single User Mode Authentication
RedHat Linux 6.0 - Single User Mode Authentication source: https://www.securityfocus.com/bid/1005/info A vulnerability exists in the manner in which RedHat Linux 6.0 protects the obtaining of a shell by booting single user mode. RedHat will prompt for the root password upon entering single user...
cobalt.raq.txt
Date: Thu, 25 Feb 1999 07:59:30 -0700 MST From: mea culpa To: InfoSec News Subject: ISN Teenager Finds Web-server hole. Forwarded From: William Knowles http://www.wired.com/news/printversion/technology/story/18109.html?wnpg=all Wired.com 2.25.99 A 17-year-old Pennsylvania high school student has...