Kaspersky Lab Multiple products privilege escalation

BASES directory contains executable files and has weak security permissions...

Rising Antivirus / Firewall weak security permissions

Weak permissions for program executables and services...

TrustPort Antivirus / TrustPort PC Security weak security permissions

Weak permissions for program files...

CVE-2009-1679: Undefined Security Weakness

The Profiles component in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1, when installing a configuration profile, can replace the password policy from Exchange ActiveSync with a weaker password policy, which allows physically proximate attackers to bypass the...

FreeBSD : typo3 -- multiple vulnerabilities (653606e9-f6ac-11dd-94d9-0030843d3802)

Secunia reports : Some vulnerabilities have been reported in Typo3, which can be exploited by malicious people to bypass certain security restrictions, conduct cross-site scripting and session fixation attacks, and compromise a vulnerable system. The 'Install tool' system extension uses...

CVE-2008-2019

Simple Machines Forum SMF, probably 1.1.4, relies on "randomly generated static" to hinder brute-force attacks on the WAV file aka audio CAPTCHA, which allows remote attackers to pass the CAPTCHA test via an automated attack that considers Hamming distances. NOTE: this issue reportedly exists...

Adobe air weak security model design

Application restrictions are not enforced...

Microsoft Windows Vista weak security permissions

Weak permissions for files and registry entries...

Cisco Router Web Setup weak default security settings

By default it's possible to access IOS Web interface without authentication with highest access security level...

CVE-2005-2510: Undefined Security Weakness

The Server Admin tool in servermgripfilter for Mac OS X 10.4 to 10.4.2, when using multiple subnets and Address Groups, does not always properly write firewall rules to the Active Rules when certain conditions occur, which could result in firewall policies that are less restrictive than intended ...

Knox Arkeia Network Backup multiple vulnerabilities

Database files and password file have weak security premossions by default. Default root password is empty. Buffer overflow...

DUWare Multiple Products - Multiple Vulnerabilities

DUWare Multiple Vulnerabilities Vendor: DUWare Product: DUWare Version: Multiple Products Website: http://www.duware.com/ BID: 9246 Description: DUportal Pro is a professional Web portal and online community. DUportal Pro contains numerous advanced features such as Web-based administration,...

MySQL 3.x4.0.x - Weak Password Encryption

MySQL 3.x4.0.x - Weak Password Encryption // source: https://www.securityfocus.com/bid/7500/info MySQL has been reported to implement a weak password encryption algorithm. It has been reported that the MySQL function used to encrypt MySQL passwords makes just one pass over the password and employ...

CVE-2001-1190: Undefined Security Weakness

The default PAM files included with passwd in Mandrake Linux 8.1 do not support MD5 passwords, which could result in a lower level of password security than intended...

Дырка в mkpasswd из expect (weak password generation)

Алгоритм генерации случайного пароля позволяет всего 32193 комбинаций...

[SECURITY] [DSA 042-1] New XEmacs and gnuserv packages available

---------------------------------------------------------------------------- Debian Security Advisory DSA-042-1 [email protected] http://www.debian.org/security/ Martin Schulze March 8, 2001 - ---------------------------------------------------------------------------- Packages : gnuserv,...