8413 matches found
Password Safe information leak
Cleartext password could be found in memory...
Novell groupwise cleartext passwords
Passwords are logged to file in cleartext...
CVE-2003-0499
CVE-2003-0499 affects Mantis 0.17.5 and earlier, where the database password is stored in cleartext in a world-readable configuration file. This permits local users to perform unauthorized database operations due to exposed credentials. Public sources in the connected documents confirm Debian DSA...
CVE-2003-0499
Mantis 0.17.5 and earlier stores its database password in cleartext in a world-readable configuration file, which allows local users to perform unauthorized database operations...
CVE-2003-0378
The Kerberos login authentication feature in Mac OS X, when used with an LDAPv3 server and LDAP bind authentication, may send cleartext passwords to the LDAP server when the AuthenticationAuthority attribute is not set...
CVE-2003-0378
The Kerberos login authentication feature in Mac OS X, when used with an LDAPv3 server and LDAP bind authentication, may send cleartext passwords to the LDAP server when the AuthenticationAuthority attribute is not set...
Pablo FTP Service multiple bugs
Anonymous user has full disk access by default. Passwords are stred in cleartext...
IRCXPro multiple bugs
Passwords are stored in cleartext, remote control is enabled by default with default password...
PFTP Cleartext Local Password Disclosure
The remote web server is running PFTP. This software stores the list of user names and passwords in clear text in \Program Files\PFTP\PFTPUSERS3.USR. An attacker with a full access to this host may use this flaw to gain access to other FTP servers used by the same users. C Tenable Network Securit...
Remote PC Access Server detection.
The remote host is running Remote PC Access Server. It is, therefore, affected by an information disclosure vulnerability due to the protocol transmitting username and passwords in cleartext. A man-in-the-middle attacker can exploit this to disclose the credentials and then take control of the...
PalmVNC weak encryption
Passwords are stored in cleartext...
Pure Secure weak encryption
Passwords for log access are stored in cleartext...
[[ TH 026 Inc. ]] SA #4 - Blackmoon FTP Server cleartext passwords and User enumeration
Telhack 026 Inc. Security Advisory - 4 Name: Blackmoon FTP Server 2.6 Free Edition Impact: Medium Date: May 21 / 2003 Daniel Nystrm a.k.a. excE [email protected] I N F O BlackMoon FTP Server is an FTP daemon written specifically for Windows 2000/XP and above. It takes advantage of all the new...
CaesarFTP weak encryption
Cleartext passwords in Program FilesCesarFTPsettings.ini...
BEA Weblogic cleartext passwords
Passwords are stored on disk in cleartext...
WebLogic Multiple Method Cleartext Password Disclosure
The remote web server is running WebLogic 7.0 or 7.0.0.1. There is a bug in these versions that could allow a local attacker to recover a WebLogic password if the screen of the WebLogic server is visible. In addition, a local user may be able to view cryptographic secrets, thereby facilitating...
Apple AirPort Base Station Authentication Credential Encryption Weakness
The remote host is an Apple Airport Wireless Access Point which can be administrated on top of TCP port 5009. There is a design flaw in the administrative protocol which makes the clients which connect to this port send the password in cleartext although slightly obsfuscated. An attacker who has...
12Planet Chat Server Administration Authentication Cleartext Credential Disclosure
The remote host is running 12Planet Chat Server, a web-based chat server written in Java. It is, therefore, affected by a credential disclosure vulnerability due to connections to this server being done via cleartext. A man-in-the-middle attacker can exploit this vulnerability to obtain the...
Sambar Server Cleartext Password Transmission
The remote Sambar server allows users to log in without using SSL. A man-in-the-middle attacker can exploit this to capture the passwords of the users of this server. The attacker can then use these to access the web mail accounts and modify the web pages on behalf of the users of the system. C...