1136 matches found
CVE-2004-0779
The 1 Mozilla 1.6, 2 Firebird 0.7 and 3 Firefox 0.8 web browsers do not properly verify that cached passwords for SSL encrypted sites are only sent via SSL encrypted sessions to the site, which allows a remote attacker to cause a cached password to be sent in cleartext to a spoofed site...
SUSE-SA:2003:036: pam_smb
The remote host is missing the patch for the advisory SUSE-SA:2003:036 pamsmb. The PAM module and server pamsmb allows users of Linux systems to be authenticated by querying an NT server. Dave Airlie informed us about a bug in the authentication code of pamsmb that allows a remote attacker to gai...
CVE-2004-0706
CVE-2004-0706 concerns Bugzilla 2.17.5 through 2.17.7 . The vulnerability is that Bugzilla embeds the database password in an image URL, which could allow local users to view the password via web server log files. The descriptions in the provided documents confirm the affected versions and the ro...
NetGear WG602 backdoor account
Backdoor account 'super' with password '5777364' allow web interface access...
ServerAlive weak encryption
Passwords are stored in text file in base64 format...
NetSupport School weak encryption
Password is stored in reversable encryption...
CVE-2003-1225
The default CredentialMapper for BEA WebLogic Server and Express 7.0 and 7.0.0.1 stores passwords in cleartext on disk, which allows local users to extract passwords...
CVE-2003-1437
BEA WebLogic Express and WebLogic Server 7.0 and 7.0.0.1, stores passwords in plaintext when a keystore is used to store a private key or trust certificate authorities, which allows local users to gain access...
vpopmail weak permissions
/etc/vpopmail.conf file with cleartext SQL password is world readable...
MySQL 3.x/4.0.x - Weak Password Encryption
// source: https://www.securityfocus.com/bid/7500/info MySQL has been reported to implement a weak password encryption algorithm. It has been reported that the MySQL function used to encrypt MySQL passwords makes just one pass over the password and employs a weak left shift based cipher. The hash...
Unauthorized access to filemaker
During authentication server sends full password list to client...
CVE-2002-0394
The CVE-2002-0394 entry refers to Red-M 1050 Access Point vulnerabilities. Affected device: Red-M 1050AP; issue: case-insensitive administrative passwords with max length 16 and allowed chars [a–z0–9], enabling quicker brute-force attempts. Related issues documented include Management Web Server ...
CVE-2001-0921
Netscape 4.79 and earlier for MacOS allows an attacker with access to the browser to obtain passwords from form fields by printing the document into which the password has been typed, which is printed in cleartext...
CVE-2001-1106
Technical details about CVE-2001-1106 are not publicly available in the provided connected documents. Monitor for updates; the inputs contain base descriptions but no additional technical specifics are provided here.
CVE-2002-1470
SHOUTcast 1.8.9 and earlier is affected. A local attacker can obtain the cleartext administrative password by issuing a GET request to port 8001, which causes the password to be written to the world-readable sc_serv.log file. This exposes credentials via local access and file exposure. No remedia...
Weak Encryption Scheme in Telindus 112x
----------------------------------------------------------------------- Product Name: TELINDUS ADSL ROUTER 112x Severity : Low Risk Remote : No Category : Trivial encryption scheme can reveal router system password Exploit : No Vendor URL : http://www.telindus.com Author : Elia Florio Discov.-Dat...
Telindus weak password encryption
During configuration trnsmition password is sent on wire in weak encryption...
Default Password (D13HH[) for 'root' Account
The account 'root' has the password 'D13HH'. An attacker may use this to gain further privileges on this system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "root"; password = "D13HH"; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid11261;...