CVE-2006-0762

WinAbility Folder Guard 4.11 allows local users to gain unauthorized access to certain capabilities of the application by renaming or moving the password file FGuard.FGP, which disables the password requirement...

CVE-2006-0591

The cryptgensalt functions for BSDI-style extended DES-based and FreeBSD-sytle MD5-based password hashes in cryptblowfish 0.4.7 and earlier do not evenly and randomly distribute salts, which makes it easier for attackers to guess passwords from a stolen password file due to the increased number o...

CVE-2006-0591

The cryptgensalt functions for BSDI-style extended DES-based and FreeBSD-sytle MD5-based password hashes in cryptblowfish 0.4.7 and earlier do not evenly and randomly distribute salts, which makes it easier for attackers to guess passwords from a stolen password file due to the increased number o...

PT-2005-5521 · Spectrum · Spectrum Cash Receipting System

Name of the Vulnerable Software and Affected Versions: Spectrum Cash Receipting System versions prior to 6.504 Description: The issue concerns the use of weak cryptography, specifically static substitution, in the PASSFILE password file. This weakness makes it easier for local users to gain...

SUSE linux chfn utility privilege escalation

Gecos field is not checked, making it possible to add records to password file...

A CVS pserver is running

A CVS Concurrent Versions System server is installed, and it is configured to have its own password file, or use that of the system. This service starts as a daemon, listening on port TCP:port. Knowing that a CVS server is present on the system gives attackers additional information about the...

wwwboard passwd.txt

This WWWBoard board system comes with a password file passwd.txt installed next to the file SPDX-FileCopyrightText: 1999 Jonathan Provencher Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

A CVS pserver is running

A CVS Concurrent Versions System server is installed, and it is configured to have its own password file, or use that of the system. This service starts as a daemon, listening on port TCP:port. SPDX-FileCopyrightText: 2005 SecuriTeam Some text descriptions might be excerpted from a referenced...

Use SMBCrack to crack the remote-host admin-password-vulnerability warning-the black bar safety net

SMBCrack for stream light 5 development of test prototype, and the conventional SMB shared violent hack tool, not using the system API, but the use of the SMB Protocol. Windows 2 0 0 0 can be in the same session for multiple password probe. Use SMBCrack crack the remote host administrator passwor...

Whisper passwords manager cleartext password

Passwords are visible in cleartext in process memory. Password for password store is not used in ecnryption, allowing to restore passwords from password file...

javamailAPI.txt

Javamail Multiple Information Disclosure Vulnerabilities May 25, 2005 Yangon, Myanmar. Vulnerable Systems: JavaMail API 1.3 JavaMail API 1.2 JavaMail API 1.1.3 Tested on Apache Tomcat/5.0.16 Possibly on all versions of Windows Failed to restrict to accessing other directory and files in...

simplephpBlog040.txt

. || | | .. \ \ | \ | | | | | |\ | | /| | /|/ | || || / Where is the security? ... Security Advisory 2005-0x00 Authors......... pjphem && LazyCrs Date............ 07/07/2005 Vendor.......... www.simplephpblog.com Type............ SimplePHPBlog 0.4.0 = Remote Password Disclosure o The Problem:...

CVE-2005-1733

CVE-2005-1733 affects Cookie Cart: password file passwd.txt is stored under the web document root with insufficient access control, enabling remote retrieval of usernames and encrypted passwords via a direct request. CVSS v2 base score 5.0 (Medium). No exploitation details or fixes are provided i...

CVE-2005-1733

Cookie Cart stores the password file under the web document root with insufficient access control, which allows remote attackers to obtain usernames and encrypted passwords via a direct request to passwd.txt...

CVE-2005-1733

Cookie Cart stores the password file under the web document root with insufficient access control, which allows remote attackers to obtain usernames and encrypted passwords via a direct request to passwd.txt...

HP-UX PHCO_25527 : HP-UX passwd(1), Local Denial of Service (DoS) (HPSBUX00191 SSRT071389 rev.2)

s700800 11.00 libpam and libpamunix cumulative patch : password file corruption using passwd1. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHCO25527. The text itself is copyright C Hewlett-Packard Developme...

security flaw

lppasswd in CUPS 1.1.22 ignores write errors when modifying the CUPS passwd file, which allows local users to corrupt the file by filling the associated file system and triggering the write errors...

WWWBoard Password File Disclosure (deprecated)

Binary data 2593.prm...

arkeia.txt

During the testing of arkeia a few security holes has been discovered. Vulnerable System: Arkeia 4.2.x, 5.2.x and 5.3.x Details: 1. Writable directory $ ls -ld /opt/arkeia/server/dbase/ drwxrwxrwx 10 root root 4096 gru 27 13:40 /opt/arkeia/server/dbase/ 2. Default the "root" account password is s...

Arkeia Possible remote root & information leakage

During the testing of arkeia a few security holes has been discovered. Vulnerable System: Arkeia 4.2.x, 5.2.x and 5.3.x Details: 1. Writable directory $ ls -ld /opt/arkeia/server/dbase/ drwxrwxrwx 10 root root 4096 gru 27 13:40 /opt/arkeia/server/dbase/ 2. Default the "root" account password is s...