CVE-2008-4107

The 1 rand and 2 mtrand functions in PHP 5.2.6 do not produce cryptographically strong random numbers, which allows attackers to leverage exposures in products that rely on these functions for security-relevant functionality, as demonstrated by the password-reset functionality in Joomla! 1.5.x an...

HPSBPI01007 SSRT4700 rev.3 - HP Web Jetadmin, Remote Unauthorized Access to Files, Denial of Service (DoS)

Potential Security Impact Remote unauthorized access to files, Denial of Service DoS VULNERABILITY SUMMARY A potential vulnerability has been identified with HP Web Jetadmin. The vulnerability could be exploited to allow remote unauthorized access to files or to create a Denial of Service DoS...

Securekit Steganography / Camouflage protection bypass

File with hidden information has strong signature, password protection is implemented in interface only...

Windows password weakness

Added: 12/19/2005 CVE: CVE-1999-0503 Background Passwords are the most commonly used method of authenticating users to a server. The combination of a login name and password is used to verify the identity of a user requesting access, and to determine what parts of the server the user has permissi...

linux-ftpd-ssl 0.17 (MKD/CWD) Remote Root Exploit

Exploit for linux platform in category remote exploits ================================================= linux-ftpd-ssl 0.17 MKD/CWD Remote Root Exploit ================================================= /Oct2005 VER2/ // / lnxFTPDsslwarez.c / / linux-ftpd-ssl 0.17 remote r00t exploit by kcope / /...

linux-ftpd-ssl 0.17 (MKD/CWD) Remote Root Exploit

No description provided by source. /Oct2005 VER2/ // / lnxFTPDsslwarez.c / / linux-ftpd-ssl 0.17 remote r00t exploit by kcope / / for all of those who installed the ssl ready version / / of linux-ftpd to be more "secure" / / / / be aware of the buffer overflows, / / the code is strong cryto / // ...

linux-ftpd-ssl 0.17 - MKDCWD Remote Code Execution

linux-ftpd-ssl 0.17 - MKDCWD Remote Code Execution /Oct2005 VER2/ // / lnxFTPDsslwarez.c / / linux-ftpd-ssl 0.17 remote r00t exploit by kcope / / for all of those who installed the ssl ready version / / of linux-ftpd to be more "secure" / / / / be aware of the buffer overflows, / / the code is...

radmin detection

radmin is running on this port. Make sure that you use a strong password, otherwise a cracker may brute-force it and control your machine. If you did not install this on the computer, you may have been hacked into. See: http://www.secnap.com/security/radmin001.html OpenVAS Vulnerability Test $Id:...

Citrix Server Detection

A Citrix server is running on this machine. SPDX-FileCopyrightText: 2005 John [email protected] Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

radmin detection

radmin is running on this port. Make sure that you use a strong password, otherwise an attacker may brute-force it and control your machine. If you did not install this on the computer, you may have been hacked into. See the references for more information. SPDX-FileCopyrightText: 2005 Michel Arb...

Default password 'synnet' for account 'debug' (SSH/Telnet)

The account SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.17289";...

Default password 'db2as' for account 'db2as' (SSH/Telnet)

The account SPDX-FileCopyrightText: 2003 Chris Foster Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.11864";...

Default password 'swift' for account 'swift' (SSH/Telnet)

The account SPDX-FileCopyrightText: 2003 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.12116";...

Default password 'db2fenc1' for account 'db2fenc1' (SSH/Telnet)

The account SPDX-FileCopyrightText: 2003 Chris Foster Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.11860";...

Default Password (synnet) for 'debug' Account

The account 'debug' on the remote host uses the password 'synnet'. An attacker may use it to gain further privileges on this system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "debug"; password = "synnet"; include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Default Password (zebra) for Zebra

The remote host is running Zebra, a routing daemon. The remote Zebra installation uses as its password the default, 'zebra'. An attacker may log in using this password and control the routing tables of the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description...

Timbuktu Detection (TCP)

The remote service is the TCP contact port for Timbuktu, a remote control software application for Windows and Mac OS X. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; ifdescription scriptid15891; scriptversion"1.18";...

Nortel Multiple Default Accounts

It is possible to log into the remote host by using a default set of credentials. An attacker may use these to gain access to the remote host. These credentials are commonly found on Nortel Accelar routing switches. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Debian DSA-181-1 : libapache-mod-ssl - XSS

Joe Orton discovered a cross site scripting problem in modssl, an Apache module that adds Strong cryptography i.e. HTTPS support to the webserver. The module will return the server name unescaped in the response to an HTTP request on an SSL port. Like the other recent Apache XSS bugs, this only...

Default Password (12345678) for 'root' Account on MacOS X Server

Nessus was able to login to the remote host using the following credentials : Username : root Password : 12345678 On older Macintosh computers, Mac OS X server is configured with this default account on newer computers, the serial number of the system is used instead. C Tenable Network Security,...