CVE-2002-0065

The CVE-2002-0065 issue affects Funk Software Proxy Host 3.x on Windows 2000/NT4 and Windows 9x. The root cause is weakly encrypted/stored passwords (obfuscated registry value on Windows 2000/NT4; PHOST.INI on Windows 9x), enabling local users to recover passwords and gain privileges. The attack ...

CVE-2002-0065

Funk Software Proxy Host 3.x uses weak encryption for the Proxy Host password, which allows local users to gain privileges by recovering the passwords from the PHOST.INI file or the Windows registry...

Security holes in Powerboard forum

Product : Powerboards http://powerboards.sourceforge.net/ Versions : 2.2b and less ? Problems : - Cross Site Scripting - Path disclosure - Access to the administration - Access to users accounts without password - Recovery of admins/users passwords - Suppression of messages - Writing on the hard...

Получение пароля AOL Instant Messenger

Можно получить пароль AOL Instant Messenger создав учетную запись AOL с тем же именем...

CVE-2001-1546

Pathways Homecare 6.5 uses weak encryption for user names and passwords, which allows local users to gain privileges by recovering the passwords from the pwhc.ini file...

PT-2001-2631 · Pathways · Pathways Homecare

Name of the Vulnerable Software and Affected Versions: Pathways Homecare version 6.5 Description: The issue concerns the use of weak encryption for user names and passwords. This weakness allows local users to gain privileges by recovering the passwords from the pwhc.ini file. Recommendations: Fo...

CVE-1999-1524

FlowPoint DSL router firmware versions prior to 3.0.8 allows a remote attacker to exploit a password recovery feature from the network and conduct brute force password guessing, instead of limiting the feature to the serial console port...

CVE-1999-1524: Undefined Security Weakness

FlowPoint DSL router firmware versions prior to 3.0.8 allows a remote attacker to exploit a password recovery feature from the network and conduct brute force password guessing, instead of limiting the feature to the serial console port...

CVE-2001-0597

Zetetic Secure Tool for Recalling Important Passwords STRIP 0.5 and earlier for the PalmOS allows a local attacker to recover passwords via a brute force attack. This attack is made feasible by STRIP's use of SysRandom, which is seeded by TimeGetTicks, and an implementation flaw which vastly...

CVE-2001-0152: Undefined Security Weakness

The password protection option for the Compressed Folders feature in Plus! for Windows 98 and Windows Me writes password information to a file, which allows local users to recover the passwords and read the compressed folders...

Dallas Semiconductor iButton DS1991 vulnerable to dictionary attack

Overview The Dallas Semiconductor iButton DS1991 is vulnerable to a dictionary attack, allowing an intruder to recover passwords. Description The Dallas Semiconductor iButton DS1911 stores 1 kilobyte of data in 3 separate password-protected areas. It includes functionality intended to prevent...

CVE-2001-0152

The password protection option for the Compressed Folders feature in Plus! for Windows 98 and Windows Me writes password information to a file, which allows local users to recover the passwords and read the compressed folders...

Solaris 2.6 - FTP Core Dump Shadow Password Recovery

Solaris 2.6 - FTP Core Dump Shadow Password Recovery source: https://www.securityfocus.com/bid/2601/info Solaris is the variant of the UNIX Operating System distributed by Sun Microsystems. Solaris is designed as a scalable operating system for the Intel x86 and Sun Sparc platforms, and operates ...

Security Bulletin MS01-019

---------------------------------------------------------------------- Title: Passwords for Compressed Folders are Recoverable Date: 28 March 2001 Software: Plus! 98 and Windows Me Impact: Data compression passwords can be recovered. Bulletin: MS01-019 Microsoft encourages customers to review the...

CVE-2000-0981

Affected software : MySQL Database Engine. Vulnerability : uses a weak authentication method that can leak information and allow recovery of passwords. Details : The CVE-2000-0981 description states a weak authentication method that could enable a remote attacker to recover the password. Nessus w...

CVE-2000-0981

MySQL Database Engine uses a weak authentication method which leaks information that could be used by a remote attacker to recover the password...

CVE-2000-0981

MySQL Database Engine uses a weak authentication method which leaks information that could be used by a remote attacker to recover the password...

CVE-2000-0981: Undefined Security Weakness

MySQL Database Engine uses a weak authentication method which leaks information that could be used by a remote attacker to recover the password...

Проблемы в авторизации MySQL

ИСпользуется слабый механизм хэширования при авторизации позволяющий восстановить пароль...

QSSL QNX 4.25 A - 'crypt()' Local Privilege Escalation

/ source: https://www.securityfocus.com/bid/1114/info A design error in the operation of the crypt3 function exists in QNX, from QNX System Software, Limited QSSL. The flaw allows the recovery of passwords from the hashes. On most Unix variants, crypt3 is based on a variant of the DES encryption...