853 matches found
Дырка в mailman
Ошибка форматной строки в wrapper позволяет получить привилегии группы mailman. Кроме того, файл содержащий пароли пользователей открыт на чтение...
CVE-2000-1008
PalmOS 3.5.2 and earlier uses weak encryption to store the user password, which allows attackers with physical access to the Palm device to decrypt the password and gain access to the device...
NetcPlus BrowseGate 2.80.2 - Weak Encryption
NetcPlus BrowseGate 2.80.2 - Weak Encryption / source: https://www.securityfocus.com/bid/1964/info BrowseGate is a proxy server which supports most standard protocols. A design error exists in BrowseGate which enables an authenticated user to view other users encrypted passwords. BrowseGate by...
NetcPlus BrowseGate 2.80.2 - Weak Encryption
/ source: https://www.securityfocus.com/bid/1964/info BrowseGate is a proxy server which supports most standard protocols. A design error exists in BrowseGate which enables an authenticated user to view other users encrypted passwords. BrowseGate by default intalls in the...
Проблема в MS Money
Пароль пользователя хранится открытым текстом...
Переполнение буфера в Darxite
Переполнение буфера при проверке пароля пользователя...
[ Hackerslab bug_paper ] ntop web mode vulnerabliity
================================================================================ Hackerslab bugpaper ntop web mode vulnerabliity ================================================================================ Command : /sbin/ntop -w port SYSTEM : N/A INFO : ntop - display top network users -w...
CVE-2000-0625
NetZero 3.0 and earlier uses weak encryption for storing a user's login information, which allows a local user to decrypt the password...
CVE-1999-0156
CVE-1999-0156 affects wu-ftpd FTP daemon. The vulnerability allows any user and password combination, effectively bypassing authentication and potentially granting unauthorized access. Public sources in the provided documents confirm authentication bypass but do not specify concrete exploitation ...
squid.exploit.txt
Holla, since some people asked how to exploit the squid bug, I send a description along. Assumptions: 1. You use plain squid-2.2-STABLE5 or below. Also, external authentification is active using a some external authentication program, which basically follows the implementation guidelines given on...
CVE-1999-0755
Windows NT RRAS and RAS clients cache a user's password even if the user has not selected the "Save password" option...