4501 matches found
phpMyAdmin: Multiple vulnerabilities
Background phpMyAdmin is a popular, web-based MySQL administration tool written in PHP. It allows users to administer a MySQL database from a web-browser. Description Two serious vulnerabilities exist in phpMyAdmin. The first allows any user to alter the server configuration variables including...
Lexmark / Dell Printer Unauthenticated Access
The remote printer has no password set. This allows anyone to change its IP or potentially to intercept print jobs sent to it. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid12236; scriptversion "$Revision: 1.14 $"; scriptcvsdate"$Date: 2013/01/25 01:19:09 $";...
CVE-2004-0382
Unknown vulnerability in the CUPS printing system in Mac OS X 10.3.3 and Mac OS X 10.2.8 with unknown impact, possibly related to a configuration file setting...
Windows 2000 SMB signing protection bypass
During connectio nsetup it's possible to switch off SMB signing regardless of policy setting...
CVE-2002-1786
SGI IRIX 6.5 through 6.5.14 applies a umask of 022 to root core dumps, which allows local users to read the core dumps and possibly obtain sensitive information...
CVE-2002-0408
htcgibin.exe in Lotus Domino server 5.0.9a and earlier, when configured with the NoBanner setting, allows remote attackers to determine the version number of the server via a request that generates an HTTP 500 error code, which leaks the version in a hard-coded error message...
CVE-2001-1221
The CVE-2001-1221 entry affects D‑Link DWL-1000AP Wireless LAN Access Point with firmware 3.2.28 #483. The issue is use of a default SNMP community string 'public', allowing remote attackers to obtain sensitive information. The provided documents do not specify affected versions beyond the listed...
Microsoft Windows SMB LsaQueryInformationPolicy Function SID Enumeration
By emulating the call to LsaQueryInformationPolicy, it was possible to obtain the host SID Security Identifier. The host SID can then be used to get the list of local users. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10859; scriptversion"1.47";...
PT-2001-2622 · Twig · Twig Webmail
Name of the Vulnerable Software and Affected Versions: TWIG webmail versions 2.7.4 and earlier Description: The default "basic" security setting in config.php for TWIG webmail stores cleartext usernames and passwords in cookies. This could allow attackers to obtain authentication information and...
CVE-1999-1554
SGI IRIX issue CVE-1999-1554: The /usr/sbin/Mail program does not properly set the group ID to the start-user’s group, enabling local users to read others’ mail on SGI IRIX 3.3 and 3.3.1. Root cause: group ID handling in Mail is incorrect. Impact: local privilege/ownership breach by reading mail ...
CVE-2001-0104
MDaemon Pro 3.5.1 and earlier have a local privilege bypass: a user can bypass the "lock server" security setting by pressing Cancel at the password prompt and then pressing Enter. The available documents confirm the affected product and UI-based trigger, but do not provide concrete mitigation st...
CVE-2000-0779
Checkpoint Firewall-1 with the RSH/REXEC setting enabled allows remote attackers to bypass access restrictions and connect to a RSH/REXEC client via malformed connection requests...
CVE-2000-0562
BlackIce Defender 2.1 and earlier, and BlackIce Pro 2.0.23 and earlier, fail to block Back Orifice traffic when the security setting is Nervous or lower. The CVE-2000-0562 entry documents this condition for these products, indicating a partial confidentiality, integrity, and availability impact w...
CVE-2000-0562: Undefined Security Weakness
BlackIce Defender 2.1 and earlier, and BlackIce Pro 2.0.23 and earlier, do not properly block Back Orifice traffic when the security setting is Nervous or lower...
CVE-2000-0562
BlackIce Defender 2.1 and earlier, and BlackIce Pro 2.0.23 and earlier, do not properly block Back Orifice traffic when the security setting is Nervous or lower...
CVE-1999-0319: Undefined Security Weakness
Buffer overflow in xmcd 2.1 allows local users to gain access through a user resource setting...
CVE-1999-1241
Internet Explorer, with a security setting below Medium, allows remote attackers to execute arbitrary commands via a malicious web page that uses the FileSystemObject ActiveX object...
CVE-1999-0319
Buffer overflow in xmcd 2.1 allows local users to gain access through a user resource setting...
