952 matches found
SNMPc v5 and v6 remote vulnerability
Topic: SNMPc v5 and v6 remote vulnerability Impact: Any remote user can gain Supervisor access to NMS Versions affected: All versions up to and including 6.0.8 Fix: available Remote: yes Exploit: available I. Description SNMPc is a general-purpose Distributed Network Manager by Castle Rock...
CVE-2002-0359
Summary of the CVE-2002-0359 (IRIX xfsmd): The SGI XFS journaling file-system daemon (xfsmd), part of the optional eoe.sw.xfsmserv package on IRIX 6.5, uses a weak (default) AUTH_UNIX RPC authentication mechanism. This allows remote, unauthenticated attackers to invoke privileged RPC functions (i...
CVE-2002-0359: Undefined Security Weakness
xfsmd for IRIX 6.5 through 6.5.16 uses weak authentication, which allows remote attackers to call dangerous RPC functions, including those that can mount or unmount xfs file systems, to gain root privileges...
Multi-Tech ProxyServers ship with null password for administrative access
Overview Some versions of the Multi-Tech ProxyServer products ship without a default password for the administrative interface. Description Some versions of the Multi-Tech ProxyServer products ships without a default password for the administrative interface permitting unauthenticated access via...
acFTP 1.4 - Invalid Password Weak Authentication
acFTP 1.4 - Invalid Password Weak Authentication source: https://www.securityfocus.com/bid/6235/info A vulnerability has been reported for acFTP. Reportedly, acFTP allows users to authenticate without a valid password. An attacker can exploit this vulnerability and log on to the vulnerable FTP...
acFTP 1.4 - Invalid Password Weak Authentication
source: https://www.securityfocus.com/bid/6235/info A vulnerability has been reported for acFTP. Reportedly, acFTP allows users to authenticate without a valid password. An attacker can exploit this vulnerability and log on to the vulnerable FTP server without need for proper authentication. USER...
CVE-2002-0994
SunPCi II VNC uses a weak authentication scheme, which allows remote attackers to obtain the VNC password by sniffing the random byte challenge, which is used as the key for encrypted communications...
CVE-2002-0994
Affected software: SunPCi II VNC. Vulnerability: weak authentication where the random byte challenge is used as the key for encrypted communications, enabling remote attackers to sniff the challenge and obtain the VNC password. Impact (as stated): attacker can obtain credentials; confidentiality ...
CVE-2002-0994
SunPCi II VNC uses a weak authentication scheme, which allows remote attackers to obtain the VNC password by sniffing the random byte challenge, which is used as the key for encrypted communications...
CVE-2002-0994: Undefined Security Weakness
SunPCi II VNC uses a weak authentication scheme, which allows remote attackers to obtain the VNC password by sniffing the random byte challenge, which is used as the key for encrypted communications...
CVE-2002-0472
MSN Messenger Service 3.6, and possibly other versions, uses weak authentication when exchanging messages between clients, which allows remote attackers to spoof messages from other users...
SGI IRIX rpc.xfsmd uses weak authentication mechanism for RPC authentication
Overview The XFS file system on SGI systems allows anonymous remote users to call xfs-related RPC functions. Description XFS is a 64-bit compliant journaling file system. The XFS journaling filesystem daemon rpc.xfsmd on SGI systems uses the default AUTHUNIX authentication mechanism a client-base...
Cobalt Qube 3.0 - Authentication Bypass
Cobalt Qube 3.0 - Authentication Bypass source: https://www.securityfocus.com/bid/5297/info A vulnerability has been reported for Cobalt Qube that may allow an attacker to bypass the authentication mechanism and obtain administrative privileges. The vulnerability occurs because of a weak...
SunPCi II VNC weak authentication scheme vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Trust Factory Security Advisory TF20020601 Discovery Date: June 2, 2002 Release Date: July 3, 2002 ID: TF20020601 Title: SunPCi II VNC weak authentication scheme vulnerability Impact: Remote attackers can gain access to the system Affected Technology:...
CVE-2002-0359
xfsmd for IRIX 6.5 through 6.5.16 uses weak authentication, which allows remote attackers to call dangerous RPC functions, including those that can mount or unmount xfs file systems, to gain root privileges...
[LSD] IRIX rpc.xfsmd multiple remote root vulnerabilities
We have found several remotely exploitable vulnerabilities in the IRIX rpc.xfsmd service, which when properly exploited can result in an unauthorized root access to the vulnerable system. SGI was informed about this issue and assigned this bug number 858714. Xfsmd service is installed and started...
CVE-2002-0472
CVE-2002-0472 affects MSN Messenger Service 3.6 and possibly other versions, where weak authentication during client message exchange enables remote spoofing of messages from other users. The OpenVAS entry for Windows Messenger (MSN/Windows Messenger family) classifies this as multiple vulnerabil...
CVE-2002-0472
MSN Messenger Service 3.6, and possibly other versions, uses weak authentication when exchanging messages between clients, which allows remote attackers to spoof messages from other users...
CVE-2002-0472: Undefined Security Weakness
MSN Messenger Service 3.6, and possibly other versions, uses weak authentication when exchanging messages between clients, which allows remote attackers to spoof messages from other users...