Design/Logic Flaw

Credant Mobile Guardian Shield for Windows 5.2.1.105 and earlier stores account names and passwords in plaintext in memory, which allows local users to obtain sensitive information by 1 reading the paging file or 2 dumping and searching the memory image. NOTE: This issue crosses privilege...

CVE-2007-2883

Credant Mobile Guardian Shield for Windows 5.2.1.105 and earlier stores account names and passwords in plaintext in memory, which allows local users to obtain sensitive information by 1 reading the paging file or 2 dumping and searching the memory image. NOTE: This issue crosses privilege...

CVE-2007-2883

Credant Mobile Guardian Shield (CMG) for Windows prior to 5.2.1 SP1 stores account names and passwords in memory in plaintext, permitting local attackers to recover credentials by reading the paging file or from a dumped memory image. The CERT note confirms credentials may be written to disk due ...

CVE-2007-2883

Credant Mobile Guardian Shield for Windows 5.2.1.105 and earlier stores account names and passwords in plaintext in memory, which allows local users to obtain sensitive information by 1 reading the paging file or 2 dumping and searching the memory image. NOTE: This issue crosses privilege...

Default credentials

lib/backup-methods.sh in Backup Manager before 0.7.6 provides the MySQL password as a plaintext command line argument, which allows local users to obtain this password by listing the process and its arguments, related to lib/backup-methods.sh...

CVE-2007-2766

lib/backup-methods.sh in Backup Manager before 0.7.6 provides the MySQL password as a plaintext command line argument, which allows local users to obtain this password by listing the process and its arguments, related to lib/backup-methods.sh...

CVE-2007-2766

lib/backup-methods.sh in Backup Manager before 0.7.6 provides the MySQL password as a plaintext command line argument, which allows local users to obtain this password by listing the process and its arguments, related to lib/backup-methods.sh...

CVE-2007-2766

lib/backup-methods.sh in Backup Manager before 0.7.6 provides the MySQL password as a plaintext command line argument, which allows local users to obtain this password by listing the process and its arguments, related to lib/backup-methods.sh...

CVE-2007-2766

Backup Manager’s lib/backup-methods.sh vulnerable before 0.7.6: the MySQL password is exposed as a plaintext command-line argument, allowing local attackers to read it by listing the process arguments. Affected product: Backup Manager; vulnerable component/file: lib/backup-methods.sh; affected ve...

CVE-2007-2766

lib/backup-methods.sh in Backup Manager before 0.7.6 provides the MySQL password as a plaintext command line argument, which allows local users to obtain this password by listing the process and its arguments, related to lib/backup-methods.sh...

Get cuteftp of ssh password-vulnerability warning-the black bar safety net

Yesterday to take to an administrator of the machine, the analysis above him the file in the Application Data directory to find the cuteftp dat file, and quickly. import into cuteftp get the password, the above is all within the network ip of the ftp connection, the network is a large network...

Information disclosure

The Administration Console in BEA WebLogic Server 9.0 may show plaintext Web Service attributes during configuration creation, which allows remote attackers to obtain sensitive credential information...

CVE-2007-2698

The Administration Console in BEA WebLogic Server 9.0 may show plaintext Web Service attributes during configuration creation, which allows remote attackers to obtain sensitive credential information...

CVE-2007-2698

Summary: CVE-2007-2698 affects BEA WebLogic Server 9.0 Administr ation Console. The issue allows an attacker to view plaintext Web Service attributes during configuration creation, potentially exposing sensitive credentials. The published CVSS v2 base score is 5.0 (Medium): Network access, low at...

CVE-2007-2698

The Administration Console in BEA WebLogic Server 9.0 may show plaintext Web Service attributes during configuration creation, which allows remote attackers to obtain sensitive credential information...

openssh security update

CentOS Errata and Security Advisory CESA-2007:0257 Updated openssh packages that fix a security issue and various bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. OpenSSH is OpenBSD's SSH Secure SHell protocol implementation...

RHEL 4 : openssh (RHSA-2007:0257)

Updated openssh packages that fix a security issue and various bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. OpenSSH is OpenBSD's SSH Secure SHell protocol implementation. This package includes the core files necessary for...

openssh vulnerable to known_hosts address harvesting

SSH, as implemented in OpenSSH before 4.0 and possibly other implementations, stores hostnames, IP addresses, and keys in plaintext in the knownhosts file, which makes it easier for an attacker that has compromised an SSH user's account to generate a list of additional targets that are more likel...

Low: Red Hat Security Advisory: openssh security and bug fix update

Updated openssh packages that fix a security issue and various bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. OpenSSH is OpenBSD's SSH Secure SHell protocol implementation. This package includes the core files necessary for...

Authentication flaw

The Auth API in ProFTPD before 20070417, when multiple simultaneous authentication modules are configured, does not require that the module that checks authentication is the same as the module that retrieves authentication data, which might allow remote attackers to bypass authentication, as...