[LSD] IRIX rpc.xfsmd multiple remote root vulnerabilities

We have found several remotely exploitable vulnerabilities in the IRIX rpc.xfsmd service, which when properly exploited can result in an unauthorized root access to the vulnerable system. SGI was informed about this issue and assigned this bug number 858714. Xfsmd service is installed and started...

CVE-2002-0472

CVE-2002-0472 affects MSN Messenger Service 3.6 and possibly other versions, where weak authentication during client message exchange enables remote spoofing of messages from other users. The OpenVAS entry for Windows Messenger (MSN/Windows Messenger family) classifies this as multiple vulnerabil...

CVE-2002-0472

MSN Messenger Service 3.6, and possibly other versions, uses weak authentication when exchanging messages between clients, which allows remote attackers to spoof messages from other users...

Strong authentication bypass in SSH

By spoofing AllowedAuthentications variably client can shoose weak authentication protocol...

Potential vulnerabilities of the Microsoft RVP-based Instant Messaging

The Encode Security Labs performed an empirical analysis of the Microsoft Instant Messaging implementation based on Exchange 2000 and using the MSN Messenger Service v3.6 client. The most important findings about the IM service are: -it does not offer any confidentiality -it is vulnerable to...

Hot Standby Router Protocol (HSRP) uses weak authentication

Overview A denial-of-service vulnerability exists in the Hot Standby Router Protocol HSRP . Description HSRP is a protocol designed to provide transparent recovery of routing services when failures occur. Quoting from RFC2281 the RFC describing the Hot Standby Router Protocol:The Hot Standby Rout...

Cayman gateways ship with null administrative and user level passwords

Overview Cayman gateways ship without a default password on the admin and user accounts. As long as the gateway is not addressable via the WAN, this can only be accessed and set by anyone on the LAN side. With admin access, the gateway settings can be configured by an intruder. Description Cayman...

CVE-2000-0981

Affected software : MySQL Database Engine. Vulnerability : uses a weak authentication method that can leak information and allow recovery of passwords. Details : The CVE-2000-0981 description states a weak authentication method that could enable a remote attacker to recover the password. Nessus w...

CVE-2000-0981

MySQL Database Engine uses a weak authentication method which leaks information that could be used by a remote attacker to recover the password...

Trend Micro's VirusWall: Multiple vunerabilities

InterScan VirusWall - multiple vunerabilities SUMMARY Product: Interscan VirusWall for UNIX Vendor: Trend Micro Testing Platform: RedHat Linux 6.2 vunerable version: 3.0.1 & 3.6.x non-vunerable versions: unknown Vendor: Trend Micro Issues: This advisory covers three separate issues 1 insecure...

SSH 1.2.x - Secure-RPC Weak Encrypted Authentication

// source: https://www.securityfocus.com/bid/2222/info SSH is a package designed to encrypt traffic between two end points using the IETF specified SSH protocol. The SSH1 package is distributed and maintained by SSH Communications Security. A problem exists which could allow the discovery of the...

CVE-2000-0981

MySQL Database Engine uses a weak authentication method which leaks information that could be used by a remote attacker to recover the password...

ISSalert: Internet Security Systems Security Advisory: Multiple vulnerabilities in the WatchGuard SOHO Firewall

TO UNSUBSCRIBE: email "unsubscribe alert" in the body of your message to [email protected] Contact [email protected] for help with any problems! --------------------------------------------------------------------------- -----BEGIN PGP SIGNED MESSAGE----- Internet Security Systems Security...

CVE-2000-0689

CVE-2000-0689 affects Account Manager LITE. The vulnerability arises because authentication is not properly enforced when attempting to change the administrator password via the amadmin.pl script with the setpasswd parameter, allowing remote attackers to gain privileges. The connected documents c...

CVE-2000-0350

CVE-2000-0350 affects NetworkICE ICEcap up to version 2.0.23. The issue is a debugging feature that remains enabled, allowing a remote attacker to bypass weak authentication and post unencrypted events. Public sources in connected documents corroborate that ICEcap stores/receives alerts and can b...

CVE-2000-0350

A debugging feature in NetworkICE ICEcap 2.0.23 and earlier is enabled, which allows a remote attacker to bypass the weak authentication and post unencrypted events...

PowerScripts PlusMail WebConsole 1.0 - Weak Authentication (3)

PowerScripts PlusMail WebConsole 1.0 - Weak Authentication 3 // source: https://www.securityfocus.com/bid/2653/info PowerScripts PlusMail Web Control Panel is a web-based administration suite for maintaining mailing lists, mail aliases, and web sites. It is reportedly possible to change the...

PowerScripts PlusMail WebConsole 1.0 - Weak Authentication (3)

// source: https://www.securityfocus.com/bid/2653/info PowerScripts PlusMail Web Control Panel is a web-based administration suite for maintaining mailing lists, mail aliases, and web sites. It is reportedly possible to change the administrative username and password without knowing the current...

CVE-1999-0742

The Debian mailman package uses weak authentication, which allows attackers to gain privileges...

PowerScripts PlusMail WebConsole 1.0 - Weak Authentication (2)

PowerScripts PlusMail WebConsole 1.0 - Weak Authentication 2 // source: https://www.securityfocus.com/bid/2653/info PowerScripts PlusMail Web Control Panel is a web-based administration suite for maintaining mailing lists, mail aliases, and web sites. It is reportedly possible to change the...