Ingate Firewall / SIParator weak authentication

Authentication mechanism is vulnerable to replay attacks...

Multiple security vulnerabilities in Bluetooth protocol and Bluetooth stacks implementations

Buffer overflows, weak authentication algorithm, weak pseudo-random number generators, directory traversals, etc...

[KAPDA::#61] - PacPoll <= 4.0 Multiple Vulnerabilities

KAPDA New advisory Vulnerable product : PacPoll = 4.0 Vendor: http://www.pacosdrivers.com/asp/poll/poll.asp Vulnerability: Admin Logon bypass , SQLInjection Date : -------------------- Found : 2006/10/10 Vendor Contacted : N/A Release Date : 2006/10/25 Vulnerabilities: -------------------- Admin...

CVE-2006-3226

Cisco Secure Access Control Server ACS 4.x for Windows uses the client's IP address and the server's port number to grant access to an HTTP server port for an administration session, which allows remote attackers to bypass authentication via various methods, aka "ACS Weak Session Management...

Cisco Secure ACS weak authentication

After authentication user is redirected to dynamic port. Authentication is perfomed only by target port and client IP address...

Mozilla Firefox cleartext password leak

Weak authentication algorithm may be choosen by browser even if stronger one is supported by server...

nexusway.txt

Product : Neteyes Nexusway http://www.neteyes.com.tw Description: Neteyes Nexusway multiple vulnerability Severity: Very High Description =========== The NexusWay is a Multiservice Border Gateway that provides the Multiaccess and Multiservice capabilities in the border segment of an enterprise...

Multiple Clavister Security Gateway Appliance Firewall vulnerabilities

DoS on IP packets handling. Weak authentication mechanism...

[Scan Associates Advisory] Neteyes Nexusway multiple vulnerability

Product : Neteyes Nexusway http://www.neteyes.com.tw Description: Neteyes Nexusway multiple vulnerability Severity: Very High Description =========== The NexusWay is a Multiservice Border Gateway that provides the Multiaccess and Multiservice capabilities in the border segment of an enterprise...

Digital Video Surveillance System weak authentication

Authentication mechanism is vulnerable to man-in-the-midle attack replay attack and cleartext recovery...

HP-UX PHSS_19748 : HPSBUX9909-103 Security Vulnerability in CDE ttsession (Rev.01)

s700800 11.00 CDE Runtime SEP 99 Cumulative Patch : ttsession uses weak RPC authentication mechanism. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHSS19748. The text itself is copyright C Hewlett-Packard...

[Full-Disclosure] 3COM 3crwe754g72-a Information Disclosure, Logs manipulation ...

Title: 3com 3crwe754g72-a Information Disclosure Class: Design Error Affects: 3com 3crwe754g72-a v 1.11 v 1.13 v 1.24 Id: cbsa-0000 Release Date: 2004 10 18 Author : Cyrille Barthelemy [email protected] -- 1. Introduction ------------------ 3Com 3crwe754g72-a is a bundle product which...

Avaya Argent Office uses weak authentication for TFTP-based administrative control

Overview The Avaya Argent Office contains a weak authentication mechanism for administrative access. Description The Avaya Argent Office uses a TFTP-based mechanism to accept requests for administrative functions. By requesting "files" from the device via its internal interface, administrators ca...

CVE-2003-0722

The default installation of sadmind on Solaris uses weak authentication AUTHSYS, which allows local and remote attackers to spoof Solstice AdminSuite clients and gain root privileges via a certain sequence of RPC packets...

CVE-2003-0722

The default installation of sadmind on Solaris uses weak authentication AUTHSYS, which allows local and remote attackers to spoof Solstice AdminSuite clients and gain root privileges via a certain sequence of RPC packets...

SNMPc v5 and v6 remote vulnerability

Topic: SNMPc v5 and v6 remote vulnerability Impact: Any remote user can gain Supervisor access to NMS Versions affected: All versions up to and including 6.0.8 Fix: available Remote: yes Exploit: available I. Description SNMPc is a general-purpose Distributed Network Manager by Castle Rock...

CVE-2002-0359

Summary of the CVE-2002-0359 (IRIX xfsmd): The SGI XFS journaling file-system daemon (xfsmd), part of the optional eoe.sw.xfsmserv package on IRIX 6.5, uses a weak (default) AUTH_UNIX RPC authentication mechanism. This allows remote, unauthenticated attackers to invoke privileged RPC functions (i...

Multi-Tech ProxyServers ship with null password for administrative access

Overview Some versions of the Multi-Tech ProxyServer products ship without a default password for the administrative interface. Description Some versions of the Multi-Tech ProxyServer products ships without a default password for the administrative interface permitting unauthenticated access via...

acFTP 1.4 - Invalid Password Weak Authentication

acFTP 1.4 - Invalid Password Weak Authentication source: https://www.securityfocus.com/bid/6235/info A vulnerability has been reported for acFTP. Reportedly, acFTP allows users to authenticate without a valid password. An attacker can exploit this vulnerability and log on to the vulnerable FTP...

acFTP 1.4 - Invalid Password Weak Authentication

source: https://www.securityfocus.com/bid/6235/info A vulnerability has been reported for acFTP. Reportedly, acFTP allows users to authenticate without a valid password. An attacker can exploit this vulnerability and log on to the vulnerable FTP server without need for proper authentication. USER...