Ipswitch IMail Server 5.0/5.0.5/5.0.6/5.0.7/5.0.8/6.0 - Weak Password Encryption

// source: https://www.securityfocus.com/bid/880/info IMail keeps the encrypted passwords for email accounts in a registry key, HKLM\SOFTWARE\Ipswitch\Imail\Domains\DomainName\Users\UserName, in a string value called "Password". The encryption scheme used is weak and has been broken. The followin...

pegasus.mail.passwd.txt

Date: Sat, 15 May 1999 12:42:12 +0000 From: galldor To: [email protected] Subject: Pegasus Mail weak encryption --------------------------------------------------------------------- Pegasus Mail Weak Encryption Versions Effected: ALL but I wrote about the V2 encryption on 3.0+ Bug Found by:...

novell.remote.nlm.passwd.txt

Date: Fri, 9 Apr 1999 02:24:45 -0700 From: [email protected] To: [email protected] Subject: New Novell Remote.NLM Password Decryption Algorithm with Exploit I am providing this message in hopes that it will contribute to the general knowledge of others. Please distribute this document fully...

rconsole.passwd.netware.txt

Date: Tue, 6 Oct 1998 02:36:11 -0500 From: Simple Nomad To: [email protected] Subject: NMRC Advisory - "Decryption" of the RCONSOLE Password Jeez I swear we'd be this productive all the time of fully funded. Anyway this makes up for the last one's lameness. -SN Nomad Mobile Research Centre A D...

topdesk.passwd.txt

Date: Mon, 15 Feb 1999 14:05:52 GMT From: dapozza To: [email protected] Subject: lame TOPdesk program encryption Hi all, I was just playing with a program called TOPdesk, it's a helpdesk program and you have the usual login for normal users and superusers. I don't know if this is a Dutch only...

Ogopogo Autothenticate 1.1.5 - Weak Password Encryption

source: https://www.securityfocus.com/bid/552/info Autothenticate is an extension for MacOS that remembers usernames and passwords from visited websites, and atomatically enters them when the site is visited again. It can be configured to store the username and password, the username only, or...

Quinn - the Eskimo and Peter N. Lewis Internet Configuration 1.02.0 Weak Password Encryption

Quinn - the Eskimo and Peter N. Lewis Internet Configuration 1.02.0 Weak Password Encryption source: https://www.securityfocus.com/bid/546/info Internet Config is a third-party freeware utility for MacOS. It provides a means of centralizing frequently-required connection information, including...

Apple Mac OS 8 8.6 - Weak Password Encryption

source: https://www.securityfocus.com/bid/519/info The encryption algorithm in MacOS system is simple and the password can be easily decoded. Password is stored in Users & Groups Data File in Preferences folder. Offset is different on each system and depends on Users & Groups configuration, but i...

Apple Mac OS 8 8.6 - Weak Password Encryption

Apple Mac OS 8 8.6 - Weak Password Encryption source: https://www.securityfocus.com/bid/519/info The encryption algorithm in MacOS system is simple and the password can be easily decoded. Password is stored in Users & Groups Data File in Preferences folder. Offset is different on each system and...

PT-1999-1157 · Sco · Sco Termvision

Name of the Vulnerable Software and Affected Versions: SCO TermVision affected versions not specified Description: A weak encryption algorithm is used for passwords, allowing them to be easily decrypted by a local user. Recommendations: At the moment, there is no information about a newer version...

Qbik WinGate 3.0 - Registry

// source: https://www.securityfocus.com/bid/511/info WinGate stores encrypted passwords in the registry, in a subkey where Everyone has Read access by default. The encryption scheme is weak, and therefore anyone can get and decrypt them. include "stdafx.h" include include mainint argc, char argv...

CVE-1999-0352

ControlIT 4.5 and earlier aka Remotely Possible has weak password encryption...

PT-1999-1041 · Controlit · Controlit

Name of the Vulnerable Software and Affected Versions: ControlIT versions 4.5 and earlier Description: The issue is related to weak password encryption. Recommendations: For ControlIT versions 4.5 and earlier, update to a version with improved password encryption to resolve the issue...

CVE-1999-1556

Microsoft SQL Server 6.5 uses weak encryption for the password for the SQLExecutiveCmdExec account and stores it in an accessible portion of the registry, which could allow local users to gain privileges by reading and decrypting the CmdExecAccount value...