3744 matches found
HP AdvanceStack Switch - Authentication Bypass
source: https://www.securityfocus.com/bid/4062/info HP AdvanceStack 10Base-T Switching Hubs combine 10Base-T functionality with the performance of switching. It has been reported that authentication for HP J3210A 10Base-T Switching Hubs may be bypassed by an unprivileged user who accesses one of...
Castelle Faxpress: Password used for NT Print queue can be discl osed in Plain Text
Overview I have reported this to Castelle and they told me it is a feature for troubleshooting, however they will make the change the next time they release the Faxpress Software. I just thought that other admins should be made aware so they can check their systems are secured correctly. Printing...
Intel WLAN Driver storing 128bit WEP-Key in plain text!
Intro: while doing some troubleshoting i found a bug on a compaq evo n600c, with an integrated 802.11b card connected via usb on the back of the display running as IntelR PRO/Wireless 2011B LAN USB Device. Description: the WEP-Key ist stored plain to the registry. the permission the the specific...
MiraMail 1.04 can give POP account access and details
Released: January 9, 2002 Discovered: January 3, 2002 by Chris Lathem [email protected] Program Overview: MiraMail is a fairly new program to the market, and is intended to be used as a news server. It is developed and maintained by Nevrona Designs. For more information please see...
Учетные записи miramail в открытом тексте (weak encryption)
Учетные записи пользователей хранятся в открытом тексте...
MS SQL 7.0 DTS saved packages contain plain text passwords
When creating a Data Transformation Service DTS Package be carefull. The saved file does not encrypt the passwords that the package will use when executed. If a client could convice an admin to create an example DTS package for troubleshooting then the client would have the admin's SQL password. ...
[SECURITY] [DSA 084-1] New gftp packages won't display the password
-------------------------------------------------------------------------- Debian Security Advisory DSA 084-1 [email protected] http://www.debian.org/security/ Martin Schulze October 18th, 2001 - -------------------------------------------------------------------------- Package : gftp...
CVE-2001-1255
WinMySQLadmin 1.1 stores the MySQL password in plain text in the my.ini file, which allows local users to obtain unathorized access the MySQL database...
Vulnerability in Amtote International homebet self service wagering system.
Product Description: Internet-based account wagering interface utilizing HTML and JAVA web based applications. The HTML functionality includes viewing current account balances, viewing current odds by track, placing wagers, reviewing wagers, and viewing official results/prices by track. The JAVA...
CVE-2001-1253
Alexis 2.0 and 2.1 in COM2001 InternetPBX stores voicemail passwords in plain text in the com2001.ini file, which could allow local users to make long distance calls as other users...
CVE-2001-0999
Outlook Express 6.00 allows remote attackers to execute arbitrary script by embedding SCRIPT tags in a message whose MIME content type is text/plain, contrary to the expected behavior that text/plain messages will not run script...
Microsoft Windows 2000 Telnet server vulnerability
RAZOR Advisory: Range checking fault condition in Microsoft Windows 2000 Telnet server Issue Date: June 8, 2001 Contact: Michal Zalewski [email protected] Topic: Range checking fault condition is present in telnet server shipped with Microsoft Windows 2000. Affected Systems: Tested on...
Oracle's ADI 7.1.1.10.1 Major security hole
The version of ADI Application Desktop Integrator 7.1.1.10.1 which was recently shipped with Oracle's Financial Applications version 11.5.3 contains a major security breach. Whenever the software is launched, it creates a file called dbg.txt on the local hard drive on the system which contains in...
Broker FTP unauthorized directory browsing and plain text password storing
403-SECURITY advisory Issue: Broker FTP unauthorized directory browsing and plain text password storing Author: Astral [email protected] Discovered: 07.11.2000 Published: 22.11.2000 Version: 4.7.5.0 others are probably vulnerable too Vendor: TransSoft I. Description: Broker FTP is powerful...
Дырки в Netscape Certificate Management/Netscape Directopy Server
Обратный путь в директориях позволяет обратиться к любому файлу. При этом пароль администрирования ххранится в файле открытым текстом...
Дырка в Course Info
Пароль администрирования хранится в ресстре открытым текстом...
ralfchat12.txt
RALF'S CHAT V.12 - http://www.ralfchat.de Ralf's Chat is a free cgi based chat program. But Ralf's Chat has some awful bugs in it. I played myself with the CGI and discovered that the masterpassword is set by a default password called: mpw So, if someone else who carries on this chatedited the...
CVE-2000-0008
FTPPro allows local users to read sensitive information, which is stored in plain text...
CVE-2000-0008
The CVE-2000-0008 issue concerns FTPPro, where local users can read sensitive data stored in plain text. Connected sources (PT-1999-1817) name FTPPro and describe the vulnerability as allowing local access to plaintext information, but do not specify affected versions or a repair/fix. Other conne...