2294 matches found
CVE-2004-1766
The CVE refers to NetScreen-Security Manager prior to Feature Pack 1 communicating with devices using ScreenOS 5.0 without encryption, allowing remote attackers to obtain sensitive information via sniffing. The available documents state the vulnerability and its impact (information disclosure) bu...
POP2 Cleartext Logins Permitted
The remote host is running a POP2 daemon that allows cleartext logins over unencrypted connections. An attacker can uncover login names and passwords by sniffing traffic to the POP2 daemon. This script was written by George A. Theall, . See the Nessus Scripts License for details. Changes by...
IMAP Service Cleartext Login Permitted
The remote host is running an IMAP daemon that allows cleartext logins over unencrypted connections. An attacker can uncover user names and passwords by sniffing traffic to the IMAP daemon if a less secure authentication mechanism eg, LOGIN command, AUTH=PLAIN, AUTH=LOGIN is used. This script was...
CVE-2004-1684
Zyxel P681 running ZyNOS Vt020225a contains portions of memory in an ARP request, which allows remote attackers to obtain sensitive information by sniffing the network...
CVE-2002-1336
TightVNC before 1.2.6 generates the same challenge string for multiple connections, which allows remote attackers to bypass VNC authentication by sniffing the challenge and response of other users...
CVE-2002-1152
CVE-2002-1152 concerns Konqueror (KDE) versions 3.0 through 3.0.2. The issue is that Konqueror does not reliably detect the secure flag on HTTP cookies, allowing cookies to be sent over unencrypted channels. This could enable remote attackers to capture cookies via sniffing, potentially compromis...
phpGroupWare Admin/Setup Password Plaintext Cookie Storage
The version of PhpGroupWare installed on the remote host is reported to be affected by a plaintext cookie authentication credentials information disclosure vulnerability. If web administration of PhpGroupWare is not conducted over an encrypted link, an attacker with the ability to sniff network...
JAVA XSLT processor XML sniffing
It's psosible to sniff XML data from different application domain...
Java XSLT security advisory addendum
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================ Illegalaccess.org security advisory addendum ============================================ Vendor informed: April, 2004 Public Advisory released: August 2, 2004 Today: August 9, 2004 URL:...
Linksys - DHCP Information Disclosure
// source: https://www.securityfocus.com/bid/10329/info It has been reported that the built-in DHCP server on these devices are prone to an information disclosure vulnerability. When attempting to exploit this issue, it has been reported that a denial of service condition may occur, stopping...
[EXPL] Linksys BOOTP Memory Leak
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
CVE-2003-1221
BEA WebLogic Express and Server 7.0 through 8.1 SP 1, under certain circumstances when a request to use T3 over SSL t3s is made to the insecure T3 port, may use a non-SSL connection for the communication, which could allow attackers to sniff sessions...
YAK! 2.1.0 still vulnerable
YAK! 2.1.0 still vulnerable =========================== for file transfer yak uses ftp mode. Yak! listens on port 3535 for file transfer in ftp mode. vulnerability in the previous version was, they were using constant username and pass combination for ftp login. 2.1.0 version seems to overcome th...
CVE-2003-0881
Mail in Mac OS X before 10.3, when configured to use MD5 Challenge Response, uses plaintext authentication if the CRAM-MD5 hashed login fails, which could allow remote attackers to gain privileges by sniffing the password...
CVE-2003-0881
Mail in Mac OS X before 10.3, when configured to use MD5 Challenge Response, uses plaintext authentication if the CRAM-MD5 hashed login fails, which could allow remote attackers to gain privileges by sniffing the password...
CVE-2003-0881
The vulnerability (CVE-2003-0881) affects Mac OS X prior to 10.3 when configured for MD5 Challenge Response. If the CRAM-MD5 hashed login fails, the system uses plaintext authentication, potentially allowing remote attackers to sniff the password and gain privileges. The connected documents provi...
CVE-2003-0670
Sustworks IPNetSentryX and IPNetMonitorX allow local users to sniff network packets via the setuid helper applications 1 RunTCPDump, which calls tcpdump, and 2 RunTCPFlow, which calls tcpflow...
CVE-2003-0670
Sustworks IPNetSentryX and IPNetMonitorX are affected. The setuid helper applications RunTCPDump (invokes tcpdump) and RunTCPFlow (invokes tcpflow) allow local users to sniff network packets, exposing partial confidentiality. Root cause is the presence of setuid wrappers enabling packet capture. ...