8433 matches found
CVE-2007-5470
Microsoft Expression Media stores the catalog password in cleartext in the catalog IVC file, which allows local users to obtain sensitive information and gain access to the catalog by reading the IVC file...
Information disclosure
Microsoft Expression Media stores the catalog password in cleartext in the catalog IVC file, which allows local users to obtain sensitive information and gain access to the catalog by reading the IVC file...
CVE-2007-5470
Microsoft Expression Media stores the catalog password in cleartext inside the catalog IVC file, enabling local users to read sensitive credentials and access the catalog. The weakness stems from a design flaw in the catalog password-protection feature; exploitation details are not provided in th...
CVE-2007-5470
Microsoft Expression Media stores the catalog password in cleartext in the catalog IVC file, which allows local users to obtain sensitive information and gain access to the catalog by reading the IVC file...
Debian DSA-1380-1 : elinks - programming error
Kalle Olavi Niemitalo discovered that elinks, an advanced text-mode WWW browser, sent HTTP POST data in cleartext when using an HTTPS proxy server potentially allowing private information to be disclosed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks...
[SECURITY] [DSA 1380-1] New elinks packages fix information disclosure
------------------------------------------------------------------------ Debian Security Advisory DSA 1380-1 [email protected] http://www.debian.org/security/ Steve Kemp October 2nd, 2007 http://www.debian.org/security/faq -...
Web Server Transmits Cleartext Credentials
The remote web server contains several HTML form fields containing an input of type 'password' which transmit their information to a remote web server in cleartext. An attacker eavesdropping the traffic between web browser and server may obtain logins and passwords of valid users. C Tenable Netwo...
Design/Logic Flaw
EMC VMware Server before 1.0.4 Build 56528 writes passwords in cleartext to unspecified log files, which allows local users to obtain sensitive information by reading these files, a different vulnerability than CVE-2005-3620...
CVE-2007-5024
CVE-2007-5024 affects EMC VMware Server prior to 1.0.4 Build 56528, where passwords are written in cleartext to unspecified log files. This local-information disclosure could allow a local attacker to read credentials by accessing these log files. The description explicitly notes this is a differ...
CVE-2007-5024
EMC VMware Server before 1.0.4 Build 56528 writes passwords in cleartext to unspecified log files, which allows local users to obtain sensitive information by reading these files, a different vulnerability than CVE-2005-3620...
Authentication flaw
The logintosimulator method in Linden Lab Second Life, as used by the secondlife:// protocol handler and possibly other Second Life login mechanisms, sends an MD5 hash in cleartext in the passwd field, which allows remote attackers to login to an account by sniffing the network and then sending...
CVE-2007-4961
The logintosimulator method in Linden Lab Second Life, as used by the secondlife:// protocol handler and possibly other Second Life login mechanisms, sends an MD5 hash in cleartext in the passwd field, which allows remote attackers to login to an account by sniffing the network and then sending...
CVE-2007-4961
The logintosimulator method in Linden Lab Second Life, as used by the secondlife:// protocol handler and possibly other Second Life login mechanisms, sends an MD5 hash in cleartext in the passwd field, which allows remote attackers to login to an account by sniffing the network and then sending...
CVE-2007-4928
The AXIS 207W camera stores a WEP or WPA key in cleartext in the configuration file, which might allow local users to obtain sensitive information...
Design/Logic Flaw
The AXIS 207W camera stores a WEP or WPA key in cleartext in the configuration file, which might allow local users to obtain sensitive information...
Design/Logic Flaw
The AXIS 207W camera uses a base64-encoded cleartext username and password for authentication, which allows remote attackers to obtain sensitive information by sniffing the wireless network or by leveraging unspecified other vectors...
CVE-2007-4928
The CVE-2007-4928 case concerns the AXIS 207W camera, where the WEP/WPA key is stored in cleartext in the device’s configuration file. This cleartext storage enables a local user to obtain sensitive credentials. The issue is documented with impact on confidentiality (local access to keys) and a l...
CVE-2007-4926
The CVE-2007-4926 entry concerns the AXIS 207W camera. The affected component is the authentication mechanism that uses a base64-encoded cleartext username and password, enabling an attacker to obtain credentials by eavesdropping on wireless traffic or via other unspecified vectors. Practical imp...