1136 matches found
Проблема в MS Money
Пароль пользователя хранится открытым текстом...
Firewall-1 session agent 3.0 -> 4.1, dictionnary and brute force attack
hi, every session agents from 3.0 to 4.1 4.1 included, all plateforms are vulnerables to a brute force and dictionnary style password attack. while authenticating a user through his port 261, firewall modules send a "331 User:" string to the agent, wait for an answer, and then reply with a "220...
CVE-2000-0589
SawMill 5.0.21 is affected by a weakness in how it stores passwords, enabling an attacker to decrypt the administrative password and modify the SawMill configuration. The vulnerability stems from weak encryption/hash usage, facilitating information disclosure and potential configuration tampering...
CVE-2000-0625
NetZero 3.0 and earlier uses weak encryption for storing a user's login information, which allows a local user to decrypt the password...
CVE-2000-0559
The CVE-2000-0559 entry describes a vulnerability in eTrust Intrusion Detection System (formerly SessionWall-3) where administrative passwords stored in the registry are protected with weak XOR encryption. The underlying issue is the weak encryption implementation, enabling a local attacker to de...
Recovering Passwords in Visible Systems' Razor
|-------------- RECOVERING PASSWORDS IN VISIBLE SYSTEMS' RAZOR ---------------| |--------------------------------------------------------------------------- --| |-------------------- Shawn Clifford [email protected] ---------------------| This advisory follows the RFP disclosure policy:...
Слабое шифрование пароля в Meeting Maker
При передаче пароля по сети используется легко дешифруемый алгорит замены символов Цезаря...
CVE-2000-0326
Meeting Maker uses weak encryption a polyalphabetic substitution cipher for passwords, which allows remote attackers to sniff and decrypt passwords for Meeting Maker accounts...
win2k.install.txt
Hi ! During the installation process of Windows 2000 professionnal anyone can connect to the ADMIN$ share as ADMINISTRATOR whithout any password. Verification : % ./smbclient \\WINDOZE\ADMIN$ -I xxx.yyy.zzz.ttt -U 'administrator' -d 0 -N Unable to open configuration file...
CVE-2000-0084
CuteFTP uses weak encryption to store password information in its tree.dat file...
CVE-1999-0519
A NETBIOS/SMB share password is the default, null, or missing...
CVE-1999-0535
CVE-1999-0535 affects Windows NT password policy settings. The connected records consistently describe a vulnerability where the account policy for passwords allows insecure configurations (e.g., inadequate minimum length, inappropriate password age, and lack of uniqueness), leading to potential ...
CVE-1999-0518
Technical details about CVE-1999-0518 are not publicly available in the provided documents. Monitor for updates from connected sources for affected products, versions, impact, and remediation information.
CVE-1999-0944
IBM WebSphere ikeyman tool uses weak encryption to store a password for a key database that is used for SSL connections...
CVE-1999-0352
CVE-1999-0352 affects ControlIT 4.5 and earlier, with weak password encryption as the root cause. Multiple connected sources corroborate the same description. The vulnerability concerns credential protection rather than an explicit code path described in detail in the provided documents. Impact i...
CVE-1999-1002
CVE-1999-1002 affects Netscape Navigator: weak encryption used to store a user's Netscape mail password, leading to partial confidentiality impact. The CVSS base score is 5.0 (MEDIUM) with network attack vector and no authentication required; exploitation details are not provided in the linked do...
CVE-1999-0741
CVE-1999-0741 affects QMS CrownNet Unix Utilities for 2060. The vulnerability allows a non-authenticated attacker to gain root access (log on without a password) via the authentication mechanism, enabling complete control over the system. The CVSS data indicates a high-severity, network-exploitab...
CVE-2000-0093
An installation of Red Hat uses DES password encryption with crypt for the initial password, instead of md5...