CVE-1999-0356: Undefined Security Weakness

ControlIT v4.5 and earlier uses weak encryption to store usernames and passwords in an address book...

CVE-1999-0845

Buffer overflow in SCO su program allows local users to gain root access via a long username...

CVE-1999-0292

CVE-1999-0292 affects Windows with the Winpopup service, where a denial of service is achievable by using unusually large usernames. The connected records reiterate a DoS via Winpopup, but do not provide concrete exploit steps, affected versions, root-cause details, or a remediation. There is no ...

CVE-1999-0691

Buffer overflow in the AddSuLog function of the CDE dtaction utility allows local users to gain root privileges via a long user name...

fw-1.lpsnoop.pl

Date: Fri, 25 Sep 1998 18:24:58 -0400 From: Andrew Danforth Subject: Re: Firewall-1 3.0b Session Agent On Fri, 25 Sep 1998, Brooke Paul wrote: -----Original Message----- From: Larry Pingree SMTP:[email protected] A problem exists in the Firewall-1 3.0b Session Agent All communications from the...

Finger Service Remote Information Disclosure

The remote host is running the 'finger' service. The purpose of this service is to show who is currently logged into the remote system, and to give information about the users of the remote system. It provides useful information to attackers, since it allows them to gain usernames, determine how...

CVE-1999-0356

ControlIT v4.5 and earlier uses weak encryption to store usernames and passwords in an address book...

PT-1999-1045 · Controlit · Controlit

Name of the Vulnerable Software and Affected Versions: ControlIT versions prior to 4.5 Description: The issue concerns the use of weak encryption for storing usernames and passwords in an address book. Recommendations: For ControlIT versions prior to 4.5, update to a version that uses strong...

CVE-1999-0656

The ugidd RPC interface, by design, allows remote attackers to enumerate valid usernames by specifying arbitrary UIDs that ugidd maps to local user and group names...

CVE-1999-1322

The installation of 1ArcServe Backup and Inoculan AV client modules for Exchange create a log file, exchverify.log, which contains usernames and passwords in plaintext...

CVE-2024-35341

Certain Anpviz products allow unauthenticated users to download the running configuration of the device via a HTTP GET request to /ConfigFile.ini or /config.xml URIs. This configuration file contains usernames and encrypted passwords encrypted with a hardcoded key common to all devices. This...