8411 matches found
CVE-2002-1676
BindView NetInventory 1.0, when used with NetRC 1.0, allows local users to read sensitive information passwords by deleting the HOSTCFG.NI file and forcing an audit, which rewrites the HOSTCFG.NI to HOSTCFG.INI and stores the passwords in cleartext until the audit is complete...
CVE-2002-1955
Iomega NAS A300U uses cleartext LANMAN authentication when mounting CIFS/SMB drives, which allows remote attackers to perform a man-in-the-middle attack...
CVE-2002-2355
Netgear FM114P firmware 1.3 wireless firewall, when configured to backup configuration information, stores DDNS DynDNS user name and password, MAC address filtering table and possibly other information in cleartext, which could allow local users to obtain sensitive information...
PT-2002-2670 · Iomega · Iomega Nas A300U
Name of the Vulnerable Software and Affected Versions: Iomega NAS A300U Description: The issue concerns the transmission of passwords in cleartext by the Network Attached Storage NAS Administration Web Page, allowing remote attackers to intercept the administrative password. Recommendations: For...
Cleartext Cryptainer memory password
Cleartext password in process' memory...
Multiple bugs in hotfoon dialer
Buffer overflows, cleartext passwords, etc...
Webserver 4D weak encryption
Passwords are stored in cleartext...
Crossitescripting in Argosoft Mail Server Pro
Crossite scripting in WebMail, cleartext passwords in cookie :...
CVE-2002-0949
Telindus 1100 series ADSL router allows remote attackers to gain privileges to the device via a certain packet to UDP port 9833, which generates a reply that includes the router's password and other sensitive information in cleartext...
CVE-2002-0911
Caldera Volution Manager 1.1 stores the Directory Administrator password in cleartext in the slapd.conf file, which could allow local users to gain privileges...
Multiple bugs in SMALL HTTP Server
FTP access to whole disk is open by default, passwords are stored in cleartext, password submission attemps are not limited...
EUVD-2002-0938
Telindus 1100 series ADSL router allows remote attackers to gain privileges to the device via a certain packet to UDP port 9833, which generates a reply that includes the router's password and other sensitive information in cleartext...
CVE-2002-0848
Cisco VPN 5000 series concentrator hardware 6.0.21.0002 and earlier, and 5.2.23.0003 and earlier, when using RADIUS with a challenge type of Password Authentication Protocol PAP or Challenge, sends the user password in cleartext in a validation retry request, which could allow remote attackers to...
CVE-2002-0788
An interaction between PGP 7.0.3 with the "wipe deleted files" option, when used on Windows Encrypted File System EFS, creates a cleartext temporary files that cannot be wiped or deleted due to strong permissions, which could allow certain local users or attackers with physical access to obtain...
PT-2002-1809 · Pgp +1 · Pgp +1
Name of the Vulnerable Software and Affected Versions: PGP version 7.0.3 Description: The issue arises from an interaction between PGP and the Windows Encrypted File System EFS when the "wipe deleted files" option is used. This interaction creates cleartext temporary files that cannot be wiped or...
CVE-2002-0849
CVE-2002-0849 : The Linux-iSCSI implementation installs the iscsi.conf file with world-readable permissions on some OSes (e.g., Red Hat Linux Limbo Beta #1), which could allow local users to gain privileges by reading the cleartext CHAP password. Root cause: file permissions on iscsi.conf. Impact...
Cisco RADIUS PAP-authentication cleartext password
In case of failed authentication password is sent in cleartext...
iDEFENSE Security Advisory: iSCSI Default Configuration File Settings
iDEFENSE Security Advisory 08.08.2002 iSCSI Default Configuration File Settings DESCRIPTION iSCSI is a popular new protocol that allows the SCSI protocol to be used over traditional IP networks. This allows for SAN like storage arrays without requiring new network infrastructure. iSCSI’s primary...
CVE-2002-0324
Greymatter 1.21c and earlier with the Bookmarklet feature enabled allows remote attackers to read a cleartext password and gain administrative privileges by guessing the name of a gmrightclick-.reg file which contains the administrator name and password in cleartext, then retrieving the file from...