PostgreSQL 6.3.26.5.3 - Cleartext Passwords

PostgreSQL 6.3.26.5.3 - Cleartext Passwords source: https://www.securityfocus.com/bid/1139/info PostgreSQL is a free RDBMS that is released under a Berkeley style license. PostgreSQL stores passwords for database users in a binary file called pgshadow. This file is readable by root and the postgr...

PostgreSQL 6.3.2/6.5.3 - Cleartext Passwords

source: https://www.securityfocus.com/bid/1139/info PostgreSQL is a free RDBMS that is released under a Berkeley style license. PostgreSQL stores passwords for database users in a binary file called pgshadow. This file is readable by root and the postgres user. Unfortunately, these passwords are...

CVE-2000-0241

The CVE-2000-0241 entry concerns vqSoft vqServer, where passwords and other sensitive data are stored in cleartext in the server.cfg file. This exposed data can let an attacker gain privileges if they can read the configuration file. The available connected documentation confirms the issue, but d...

CVE-2000-0241

vqSoft vqServer stores sensitive information such as passwords in cleartext in the server.cfg file, which allows attackers to gain privileges...

CVE-2000-0220

ZoneAlarm is reported to send sensitive system and network information in cleartext to the Zone Labs server when a user requests more information about an event. The PT-2000-1202 entry attributes the vulnerability to ZoneAlarm (affected versions not specified) and reiterates that the issue involv...

CVE-2000-0220

ZoneAlarm sends sensitive system and network information in cleartext to the Zone Labs server if a user requests more information about an event...

CVE-2000-0241

vqSoft vqServer stores sensitive information such as passwords in cleartext in the server.cfg file, which allows attackers to gain privileges...

CVE-2000-0220

ZoneAlarm sends sensitive system and network information in cleartext to the Zone Labs server if a user requests more information about an event...

PT-2000-1202 · Zone · Zonealarm

Name of the Vulnerable Software and Affected Versions: ZoneAlarm affected versions not specified Description: The issue concerns ZoneAlarm sending sensitive system and network information in cleartext to the Zone Labs server when a user requests more information about an event. Recommendations: A...

CVE-2000-0086

The CVE-2000-0086 entry concerns Netopia Timbuktu Pro, where credentials (user IDs and passwords) are transmitted in cleartext, enabling eavesdroppers to obtain them via network sniffing. The available documents confirm the affected software and the root cause (unencrypted credential handling), w...

CVE-1999-0607

quikstore.cgi in QuikStore shopping cart stores quikstore.cfg under the web document root with insufficient access control, which allows remote attackers to obtain the cleartext administrator password and gain privileges...

CVE-2000-0086

Netopia Timbuktu Pro sends user IDs and passwords in cleartext, which allows remote attackers to obtain them via sniffing...

CVE-2000-0086

Netopia Timbuktu Pro sends user IDs and passwords in cleartext, which allows remote attackers to obtain them via sniffing...

CVE-1999-1444

genkey utility in Alibaba 2.0 generates RSA key pairs with an exponent of 1, which results in transactions that are sent in cleartext...

CVE-1999-0932

Mediahouse Statistics Server allows remote attackers to read the administrator password, which is stored in cleartext in the ss.cfg file...

CVE-1999-1353

Nosque MsgCore 2.14 stores passwords in cleartext: 1 the administrator password in the AdmPasswd registry key, and 2 user passwords in the Userbase.dbf data file, which could allow local users to gain privileges...

CVE-1999-1354

E-mail client in Softarc FirstClass Internet Server 5.506 and earlier stores usernames and passwords in cleartext in the files 1 home.fc for version 5.506, 2 network.fc for version 3.5, or 3 FCCLIENT.LOG when logging is enabled...

rlogin Service Detection

The rlogin service is running on the remote host. This service is vulnerable since data is passed between the rlogin client and server in cleartext. A man-in-the-middle attacker can exploit this to sniff logins and passwords. Also, it may allow poorly authenticated logins without passwords. If th...

Microsoft Internet Explorer 5 - FTP Password Storage

Microsoft Internet Explorer 5 - FTP Password Storage Microsoft Internet Explorer 5.0 for Windows 2000/Windows NT 4 FTP Password Storage Vulnerability source: https://www.securityfocus.com/bid/610/info FTP usernames and passwords for sites accessed via Internet Explorer 5.X are stored cleartext in...

Microsoft Internet Explorer 5 - FTP Password Storage

Microsoft Internet Explorer 5.0 for Windows 2000/Windows NT 4 FTP Password Storage Vulnerability source: https://www.securityfocus.com/bid/610/info FTP usernames and passwords for sites accessed via Internet Explorer 5.X are stored cleartext in history files stored under...