8937 matches found
CVE-2000-0777
The password protection feature of Microsoft Money can store the password in plaintext, which allows attackers with physical access to the system to obtain the password, aka the "Money Password" vulnerability...
CVE-2000-0777
CVE-2000-0777 concerns Microsoft Money: the password protection feature stores the password in plaintext, enabling local attackers with physical access to extract it. CVSSv2 base score 7.2 (HIGH) with LOCAL access, LOW attack complexity, and full impact on confidentiality, integrity, and availabi...
CVE-2000-0402
The Mixed Mode authentication capability in Microsoft SQL Server 7.0 stores the System Administrator sa account in plaintext in a log file which is readable by any user, aka the "SQL Server 7.0 Service Pack Password" vulnerability...
CVE-2000-0402
CVE-2000-0402 concerns Information Disclosure in Microsoft SQL Server 7.0: the sa password is stored in plaintext in a log file (sqlsp.log) readable by any user. This vulnerability is described as the "SQL Server 7.0 Service Pack Password" issue. Public references in the provided documents point ...
CVE-1999-0387
A legacy credential caching mechanism used in Windows 95 and Windows 98 systems allows attackers to read plaintext network passwords...
CVE-2000-0434
The CVE-2000-0434 issue concerns the Allmanage web site administration software. The underlying problem is that the administrative password is stored in plaintext in a file that could be accessed by remote attackers. This creates the potential for an attacker to obtain the password and gain unaut...
CVE-2000-0434
The administrative password for the Allmanage web site administration software is stored in plaintext in a file which could be accessed by remote attackers...
RedHat 6.2 - Piranha Virtual Server Package Plaintext Password
RedHat 6.2 - Piranha Virtual Server Package Plaintext Password source: https://www.securityfocus.com/bid/1367/info Password changes submitted to Red Hat Piranha via HTTP are insecurely passed as variables in a GET request. Unauthorized users could obtain the password by reading the httpd access l...
Shiva Access Manager 5.0.0 Plaintext LDAP root password.
In testing Intel's Shiva Access Manager RADIUS/Tacacs+ product, i recently came across an important security hole in the LDAP connectivity on the Solaris platform version of this product. When you configure the S.A.M. to store all of it's information in an LDAP directory, it asks that you give it...
Открытый пароль в Shiva
Открытый на чтение файл $SHIVAHOMEDIR/insnmgmt/shivaaccessmanager/radtac.ini содержит пароль корневой структуры LDAP в открытом тексте...
Security Bulletin (MS00-035)
Microsoft Security Bulletin MS00-035 - -------------------------------------- Patch Available for "SQL Server 7.0 Service Pack Password" Vulnerability May 30, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Microsoftr SQL Serverr 7.0 Service Packs 1...
CVE-2000-0402
The Mixed Mode authentication capability in Microsoft SQL Server 7.0 stores the System Administrator sa account in plaintext in a log file which is readable by any user, aka the "SQL Server 7.0 Service Pack Password" vulnerability...
CVE-2000-0402
The Mixed Mode authentication capability in Microsoft SQL Server 7.0 stores the System Administrator sa account in plaintext in a log file which is readable by any user, aka the "SQL Server 7.0 Service Pack Password" vulnerability...
CVE-2000-0434
The administrative password for the Allmanage web site administration software is stored in plaintext in a file which could be accessed by remote attackers...
qnx crypt comprimised
the crypt function for qnx turned out to a bit mixer, not a hash function. It's now possible to extract plaintext from the hashes. On a related note, all IOpeners running qnx use the same root password. Telnetd is running, and allows remote login as root. This is a huge security hole, as you can...
CVE-1999-0397
CVE-1999-0397 affects the demo version of the Quakenbush NT Password Appraiser. The vulnerability is that passwords are transmitted across the network in plaintext, exposing confidentiality and integrity. The PT-1999-1083 entry explicitly lists the affected software as the Quakenbush NT Password ...
CVE-1999-0364
CVE-1999-0364 affects Microsoft Access 97, where a database password is stored as plaintext in a foreign .mdb file, enabling access to data. The linked documents consistently describe plaintext password storage as the vulnerability; no patch or remediation details are provided in the sources. Imp...
CVE-1999-0397
The demo version of the Quakenbush NT Password Appraiser sends passwords across the network in plaintext...
CVE-1999-0364
Microsoft Access 97 stores a database password as plaintext in a foreign mdb, allowing access to data...
CVE-1999-0862
The CVE-1999-0862 case relates to insecure directory permissions in the PostgreSQL RPM distribution, enabling local users to gain privileges by reading a plaintext password file. The PT-Security entry notes PostgreSQL (affected versions not specified) and identifies the root cause as insecure RPM...