master account software vulnerabilities
vulnerabilities.aspcode.net
Searching master account software vulnerabilities
A Unix account has a guessable password.
guessable
|
password
|
account
|
Unix
|
has
|
A Unix account has a guessable password.
A Unix account has a default, null, blank, or m
password
|
default
|
missing
|
account
|
blank
|
Unix
|
null
|
has
|
A Unix account has a default, null, blank, or missing password.
A Windows NT local user or administrator accoun
administrator
|
guessable
|
password
|
account
|
Windows
|
local
|
user
|
has
|
A Windows NT local user or administrator account has a guessable password.
A Windows NT domain user or administrator accou
administrator
|
guessable
|
password
|
account
|
Windows
|
domain
|
user
|
has
|
A Windows NT domain user or administrator account has a guessable password.
An account on a router, firewall, or other netw
guessable
|
firewall
|
password
|
network
|
account
|
router
|
device
|
other
|
has
|
An account on a router, firewall, or other network device has a guessable password.
The Windows NT guest account is enabled.
account
|
enabled
|
Windows
|
guest
|
The Windows NT guest account is enabled.
A Windows NT administrator account has the defa
administrator
|
default
|
account
|
Windows
|
name
|
has
|
A Windows NT administrator account has the default name of Administrator.
Oracle Database Assistant 1.0 in Oracle 8.0.3 E
Assistant
|
Database
|
Oracle
|
Oracle Database Assistant 1.0 in Oracle 8.0.3 Enterprise Edition stores the database master password in plaintext in the spoolmain.log file when a new database is created, which allows local users to obtain the password from that file.
Buffer overflows in OpenSSL 0.9.6d and earlier,
097-beta2
|
arbitrary
|
attackers
|
overflows
|
execute
|
OpenSSL
|
earlier
|
Buffer
|
remote
|
allow
|
code
|
096d
|
via
|
Buffer overflows in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allow remote attackers to execute arbitrary code via (1) a large client master key in SSL2 or (2) a large session ID in SSL3.
Buffer overflow in OpenSSL 0.9.7 before 0.9.7-b
overflow
|
OpenSSL
|
Buffer
|
Buffer overflow in OpenSSL 0.9.7 before 0.9.7-beta3, with Kerberos enabled, allows attackers to execute arbitrary code via a long master key.
Entrust Authority Security Manager (EASM) 6.0 d
Authority
|
Security
|
Manager
|
Entrust
|
Entrust Authority Security Manager (EASM) 6.0 does not properly require multiple master users to change the password of a master user, which could allow a master user to perform operations that require multiple authorizations.
The Name Service Daemon (nsd), when running on
Service
|
Daemon
|
Name
|
The Name Service Daemon (nsd), when running on an NIS master on SGI IRIX 6.5.x through 6.5.20f, and possibly earlier versions, allows remote attackers to cause a denial of service (crash) via a UDP port scan.
Battlefield 1942 1.6.19 and earlier, and Battle
Battlefield
|
Battlefield 1942 1.6.19 and earlier, and Battlefield Vietnam 1.2 and earlier, allows a remote master server to cause a denial of service (client crash) via a server reply that contains a large numplayers value, which triggers a null dereference.
Master of Orion III 1.2.5 and earlier allows re
Master
|
Orion
|
III
|
Master of Orion III 1.2.5 and earlier allows remote attackers to cause a denial of service (game exit) via a data packet that contains a large size specifier, which causes a large memory allocation to fail.
Master of Orion III 1.2.5 and earlier allows re
Master
|
Orion
|
III
|
Master of Orion III 1.2.5 and earlier allows remote attackers to cause a denial of service (server crash) via multiple connections with long nicknames, possibly triggering a buffer overflow.
Unspecified vulnerability in passwordserver in
passwordserver
|
vulnerability
|
Unspecified
|
Server
|
Mac
|
Unspecified vulnerability in passwordserver in Mac OS X Server 10.3.9 and 10.4.3, when creating an Open Directory master server, allows local users to gain privileges via unknown attack vectors.
The Microsoft Wireless Zero Configuration syste
Configuration
|
Microsoft
|
Wireless
|
system
|
Zero
|
The Microsoft Wireless Zero Configuration system (WZCS) allows local users to access WEP keys and pair-wise Master Keys (PMK) of the WPA pre-shared key via certain calls to the WZCQueryInterface API function in wzcsapi.dll.
Cisco Secure Access Control Server (ACS) 3.x fo
Control
|
Server
|
Access
|
Secure
|
Cisco
|
Cisco Secure Access Control Server (ACS) 3.x for Windows stores ACS administrator passwords and the master key in the registry with insecure permissions, which allows local users and remote administrators to decrypt the passwords by using Microsoft's cryptographic API functions to obtain the plaintext version of the master key.
JFacets before 0.2 allows remote attackers to g
privileges
|
profileID
|
attackers
|
modified
|
JFacets
|
account
|
request
|
before
|
allows
|
remote
|
gain
|
any
|
via
|
GET
|
JFacets before 0.2 allows remote attackers to gain privileges as any account via a GET request with a modified account profileID.
DreameeSoft Password Master 1.0 stores the data
authentication
|
unencrypted
|
unspecified
|
DreameeSoft
|
attackers
|
contents
|
physical
|
Password
|
database
|
bypass
|
access
|
Master
|
stores
|
format
|
allows
|
which
|
read
|
set
|
via
|
DreameeSoft Password Master 1.0 stores the database in an unencrypted format when the master password is set, which allows attackers with physical access to read the database contents via an unspecified authentication bypass. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Software vulnerabilities results 1 to 20 of 270
Page:
1
2
3
4
5
...
14
►