CVE-2008-0724

The Everything Development Engine in The Everything Development System Pre-1.0 and earlier stores passwords in cleartext in a database, which enables context-dependent attackers to obtain access to user accounts. Affected component: password storage in the engine; root cause: cleartext password s...

CVE-2008-0724

The Everything Development Engine in The Everything Development System Pre-1.0 and earlier stores passwords in cleartext in a database, which makes it easier for context-dependent attackers to obtain access to user accounts...

CVE-2007-6340

Geert Moernaut LSrunasE 1.0 and Supercrypt 1.0 use the RC4 stream cipher without constructing a unique initialization vector IV, which makes it easier for local users to obtain cleartext passwords...

Default credentials

Geert Moernaut LSrunasE 1.0 and Supercrypt 1.0 use the RC4 stream cipher without constructing a unique initialization vector IV, which makes it easier for local users to obtain cleartext passwords...

CVE-2007-6340

The connected advisory confirms CVE-2007-6340 affects LSrunasE 1.0 and Supercrypt 1.0 and explains the root cause: RC4 is used without a unique initialization vector, deriving a constant keystream across all passwords. This insecure design allows an attacker with local access to break encryption ...

CVE-2007-6340

Geert Moernaut LSrunasE 1.0 and Supercrypt 1.0 use the RC4 stream cipher without constructing a unique initialization vector IV, which makes it easier for local users to obtain cleartext passwords...

CVE-2008-0441

IBM Tivoli Business Service Manager TBSM 4.1.1 stores passwords in cleartext 1 after external authentication, which triggers writing the password to SMserver.log; and 2 after a reconfig action; which allows local users to obtain sensitive information...

Authentication flaw

IBM Tivoli Business Service Manager TBSM 4.1.1 stores passwords in cleartext 1 after external authentication, which triggers writing the password to SMserver.log; and 2 after a reconfig action; which allows local users to obtain sensitive information...

CVE-2008-0441

IBM Tivoli Business Service Manager (TBSM) 4.1.1 stores passwords in cleartext after external authentication and after a reconfig action, triggering writing credentials to SM_server.log. This leads to local users potentially obtaining sensitive information. The vulnerability is documented across ...

CVE-2008-0441

IBM Tivoli Business Service Manager TBSM 4.1.1 stores passwords in cleartext 1 after external authentication, which triggers writing the password to SMserver.log; and 2 after a reconfig action; which allows local users to obtain sensitive information...

CVE-2008-0440

AlstraSoft Forum Pay Per Post Exchange 2.0 stores passwords in cleartext, which makes it easier for attackers to access user accounts...

Design/Logic Flaw

AlstraSoft Forum Pay Per Post Exchange 2.0 stores passwords in cleartext, which makes it easier for attackers to access user accounts...

CVE-2008-0440

The affected software is AlstraSoft Forum Pay Per Post Exchange 2.0. The CVE entry describes the root cause as storing passwords in cleartext, enabling attackers to access user accounts. The connected documents confirm this issue, but do not provide a remediation or patch version. Exploitation st...

CVE-2008-0440

AlstraSoft Forum Pay Per Post Exchange 2.0 stores passwords in cleartext, which makes it easier for attackers to access user accounts...

CVE-2008-0374

OKI C5510MFP Printer CU H2.15, PU 01.03.01, System F/W 1.01, and Web Page 1.00 sends the configuration of the printer in cleartext, which allows remote attackers to obtain the administrative password by connecting to TCP port 5548 or 7777...

CVE-2008-0374

OKI C5510MFP Printer CU H2.15, PU 01.03.01, System F/W 1.01, and Web Page 1.00 sends the configuration of the printer in cleartext, which allows remote attackers to obtain the administrative password by connecting to TCP port 5548 or 7777...

CVE-2008-0374

OKI C5510MFP Printer CU H2.15, PU 01.03.01, System F/W 1.01, Web Page 1.00 exposes its configuration in cleartext, allowing remote attackers to obtain the administrative password by connecting to TCP ports 5548 or 7777. The issue is confirmed across multiple sources; CVSS v3.1 base score 7.5 (HIG...

PT-2008-2007 · Oki · Oki C5510Mfp Printer

Name of the Vulnerable Software and Affected Versions: OKI C5510MFP Printer CU H2.15, PU 01.03.01, System F/W 1.01, and Web Page 1.00 Description: The issue allows remote attackers to obtain the administrative password by connecting to TCP port 5548 or 7777, as the printer sends its configuration...

Debian Security Advisory DSA 1380-1 (elinks)

The remote host is missing an update to elinks announced via advisory DSA 1380-1. OpenVAS Vulnerability Test $Id: deb13801.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1380-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian: Security Advisory (DSA-1380-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...