CVE List
| Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
|---|---|---|---|---|---|---|---|
| 4158 | CVE-2001-1354 | Candidate | NetWin Authentication module (NWAuth) 2.0 and 3.0b, as implemented in SurgeFTP, DMail, and possibly other packages, uses weak password hashing, which could allow local users to decrypt passwords or use a different password that has the same hash value as the correct password. | Proposed (20020611) | ACCEPT(3) Alderson, Cole, Frech | NOOP(4) Cox, Foat, Green, Wall | View | |
| 4159 | CVE-2001-1355 | Candidate | Buffer overflows in NetWin Authentication Module (NWAuth) 3.0b and earlier, as implemented in DMail, SurgeFTP, and possibly other packages, could allow attackers to execute arbitrary code via long arguments to (1) the -del command or (2) the -lookup command. | Proposed (20020611) | ACCEPT(3) Alderson, Cole, Frech | NOOP(3) Cox, Foat, Wall | View | |
| 4160 | CVE-2001-1356 | Candidate | NetWin SurgeFTP 2.0f and earlier encrypts passwords using weak hashing, a fixed salt value and modulo 40 calculations, which allows remote attackers to conduct brute force password guessing attacks against the administrator account on port 7021. | Proposed (20020611) | ACCEPT(3) Alderson, Cole, Frech | NOOP(3) Cox, Foat, Wall | View | |
| 4928 | CVE-2002-0537 | Candidate | The admin.html file in StepWeb Search Engine (SWS) 2.5 stores passwords in links to manager.pl, which allows remote attackers who can access the admin.html file to gain administrative privileges to SWS. | Proposed (20020611) | ACCEPT(1) Frech | NOOP(4) Cole, Cox, Foat, Wall | View | |
| 4161 | CVE-2001-1357 | Candidate | Multiple vulnerabilities in phpMyChat before 0.14.5 exist in (1) input.php3, (2) handle_inputH.php3, or (3) index.lib.php3 with unknown consequences, possibly related to user spoofing or improperly initialized variables. | Proposed (20020611) | ACCEPT(3) Alderson, Cole, Green | MODIFY(1) Frech | NOOP(3) Cox, Foat, Wall | Alderson> Given the fact that there is limited information concerning | these "multiple" vulnerabilities mixed with the importance of time. It | appears that the information obtained so far is as sepcific as its going to | get. | Frech> XF:phpmychat-weak-input(9831) | View |
Page 97 of 20943, showing 5 records out of 104715 total, starting on record 481, ending on 485
