ISSalert: Internet Security Systems Security Advisory: Multiple vulnerabilities in the WatchGuard SOHO Firewall

TO UNSUBSCRIBE: email "unsubscribe alert" in the body of your message to [email protected] Contact [email protected] for help with any problems! --------------------------------------------------------------------------- -----BEGIN PGP SIGNED MESSAGE----- Internet Security Systems Security...

CVE-2000-0689

CVE-2000-0689 affects Account Manager LITE. The vulnerability arises because authentication is not properly enforced when attempting to change the administrator password via the amadmin.pl script with the setpasswd parameter, allowing remote attackers to gain privileges. The connected documents c...

CVE-2000-0350

A debugging feature in NetworkICE ICEcap 2.0.23 and earlier is enabled, which allows a remote attacker to bypass the weak authentication and post unencrypted events...

CVE-2000-0350

CVE-2000-0350 affects NetworkICE ICEcap up to version 2.0.23. The issue is a debugging feature that remains enabled, allowing a remote attacker to bypass weak authentication and post unencrypted events. Public sources in connected documents corroborate that ICEcap stores/receives alerts and can b...

PowerScripts PlusMail WebConsole 1.0 - Weak Authentication (3)

// source: https://www.securityfocus.com/bid/2653/info PowerScripts PlusMail Web Control Panel is a web-based administration suite for maintaining mailing lists, mail aliases, and web sites. It is reportedly possible to change the administrative username and password without knowing the current...

PowerScripts PlusMail WebConsole 1.0 - Weak Authentication (3)

PowerScripts PlusMail WebConsole 1.0 - Weak Authentication 3 // source: https://www.securityfocus.com/bid/2653/info PowerScripts PlusMail Web Control Panel is a web-based administration suite for maintaining mailing lists, mail aliases, and web sites. It is reportedly possible to change the...

CVE-1999-0742

The Debian mailman package uses weak authentication, which allows attackers to gain privileges...

PowerScripts PlusMail WebConsole 1.0 - Weak Authentication (1)

// source: https://www.securityfocus.com/bid/2653/info PowerScripts PlusMail Web Control Panel is a web-based administration suite for maintaining mailing lists, mail aliases, and web sites. It is reportedly possible to change the administrative username and password without knowing the current...

PowerScripts PlusMail WebConsole 1.0 - Weak Authentication (2)

// source: https://www.securityfocus.com/bid/2653/info PowerScripts PlusMail Web Control Panel is a web-based administration suite for maintaining mailing lists, mail aliases, and web sites. It is reportedly possible to change the administrative username and password without knowing the current...

PowerScripts PlusMail WebConsole 1.0 - Weak Authentication (2)

PowerScripts PlusMail WebConsole 1.0 - Weak Authentication 2 // source: https://www.securityfocus.com/bid/2653/info PowerScripts PlusMail Web Control Panel is a web-based administration suite for maintaining mailing lists, mail aliases, and web sites. It is reportedly possible to change the...

PowerScripts PlusMail WebConsole 1.0 - Weak Authentication (1)

PowerScripts PlusMail WebConsole 1.0 - Weak Authentication 1 // source: https://www.securityfocus.com/bid/2653/info PowerScripts PlusMail Web Control Panel is a web-based administration suite for maintaining mailing lists, mail aliases, and web sites. It is reportedly possible to change the...

CVE-1999-0687

The ToolTalk ttsession daemon uses weak RPC authentication, which allows a remote attacker to execute commands...

CVE-1999-0627

The rexd service is running, which uses weak authentication that can allow an attacker to execute commands...

CVE-1999-0627

The CVE-1999-0627 case concerns the rexd service, reportedly running with weak authentication that can allow an attacker to execute commands. Multiple connected sources reiterate that rexd uses weak/no authentication, enabling command execution on affected systems. The records do not specify exac...

rexecd Service Detection

The rexecd service is running on the remote host. This service is design to allow users of a network to execute commands remotely. However, rexecd does not provide any good means of authentication, so it may be abused by an attacker to scan a third-party host. C Tenable Network Security, Inc...

CVE-1999-0742

The Debian mailman package uses weak authentication, which allows attackers to gain privileges...

PT-1998-1091 · Microsoft · Windows Nt

Name of the Vulnerable Software and Affected Versions: Windows NT affected versions not specified Description: The issue concerns a Windows NT domain where a user or administrator account has a password that can be easily guessed. Recommendations: For all affected versions, ensure that strong,...

CVE-1999-0627

The rexd service is running, which uses weak authentication that can allow an attacker to execute commands...

PT-1992-1003 · Rexd · Rexd

Name of the Vulnerable Software and Affected Versions: rexd affected versions not specified Description: The issue is related to the rexd service, which utilizes weak authentication. This weakness can be exploited by an attacker to execute commands. Recommendations: At the moment, there is no...

Weak authentication in ATT VNC

Advisory ID Internal CORE-21011501 Advisory ID: CORE-2001011501 Bugtraq ID: 2275 CVE Name: None currently assigned. Title: Weak authentication in ATT VNC Class: Design error Remotely Exploitable: yes Locally Exploitable: no Release Mode: USER RELEASE Vulnerability Description: As stated in the VN...