exploits , vulnerabilities , articles , Apache htpasswd Password Entropy Weakness

Title	Apache htpasswd Password Entropy Weakness
Published	2003-09-25-12:00AM
Updated	2003-09-25-09:44PM
Class	Design Error
CVE	CVE-MAP-NOMATCH
Remote	Yes
Local	Yes
Credit	The discovery of this weakness has been credited to Andreas Steinmetz <ast@domdv.de>.
Vulnerable	Apache Software Foundation Apache 1.3.28 Conectiva Linux 8.0 MandrakeSoft Linux Mandrake 9.2 MandrakeSoft Linux Mandrake 9.2 amd64 OpenBSD OpenBSD 3.4 OpenPKG OpenPKG 1.3 Apache Software Foundation Apache 1.3.27 HP HPUX (VVOS) 11.0 4 HP VirtualVault 4.5 HP VirtualVault 4.6 HP Webproxy 2.0 Immunix Immunix OS 7 MandrakeSoft Linux Mandrake 9.1 MandrakeSoft Linux Mandrake 9.1 ppc OpenBSD OpenBSD 3.3 OpenPKG OpenPKG Current RedHat Enterprise Linux AS 2.1 RedHat Enterprise Linux AS 2.1 IA64 RedHat Enterprise Linux ES 2.1 RedHat Enterprise Linux ES 2.1 IA64 RedHat Enterprise Linux WS 2.1 RedHat Enterprise Linux WS 2.1 IA64 RedHat Linux Advanced Work Station 2.1 SGI IRIX 6.5.19
Not Vulnerable
Code	No exploit required.
TXT

Vulnerabilities - newest 10 RSS | More

• 2008-12-04 Rae Media Web Based Contact Management Login SQL Injection Vulnerability
• 2008-12-04 Nagios External Commands and Adaptive Commands Unspecified Vulnerability
• 2008-12-04 Z1Exchange SQL Injection and Cross Site Scripting Vulnerabilities
• 2008-12-04 mvnForum Cross Site Scripting Vulnerability
• 2008-12-04 i-Net Solution Orkut Clone SQL Injection and Cross Site Scripting Vulnerabilities
• 2008-12-04 Sun Java Runtime Environment and Java Development Kit Multiple Security Vulnerabilities
• 2008-12-04 Jbook SQL Injection Vulnerability
• 2008-12-04 SquirrelMail Malformed HTML Mail Message HTML Injection Vulnerability
• 2008-12-04 HP-UX Unspecified Local Denial Of Service Vulnerability
• 2008-12-04 Netrw Vim Script Information Disclosure Vulnerability

• Vulnerabilities
• Exploits
• News
• Articles

Copyright 2007, SecurityDot
Fri, 05 Dec 2008 16:54:13 +0000