CVE-1999-0470

CVE-1999-0470: A weak password encryption algorithm is used by Novell Remote.NLM, allowing passwords to be decrypted. The description from multiple sources confirms the flaw but provides no product-specific fixes or exploit details in the provided documents. The CVSS metrics indicate a network-ex...

CVE-1999-1316

Passfilt.dll in Windows NT SP2 allows users to create a password that contains the user's name, which could make it easier for an attacker to guess...

CVE-1999-1497

Ipswitch IMail 5.0 and 6.0 uses weak encryption to store passwords in registry keys, which allows local attackers to read passwords for e-mail accounts...

Ipswitch IMail Server 5.0/5.0.5/5.0.6/5.0.7/5.0.8/6.0 - Weak Password Encryption

// source: https://www.securityfocus.com/bid/880/info IMail keeps the encrypted passwords for email accounts in a registry key, HKLM\SOFTWARE\Ipswitch\Imail\Domains\DomainName\Users\UserName, in a string value called "Password". The encryption scheme used is weak and has been broken. The followin...

CVE-1999-0884

The Zeus web server administrative interface uses weak encryption for its passwords...

hack_wsftp.txt

Hacking WS FTP.INI ------------------ http://4n4rchy.hypermart.net by, Netherpunk, Anarchist Rampage Inc. I pretty much stumbled onto this bug by myself. Others have probably found it before me, so I'll let you decide. I actually rewted a few web servers with this thing, so it can be pretty usefu...

controlIT.txt

ISS Security Advisory January 25, 1999 Multiple vulnerabilities in ControlITtm formerly Remotely Possible/32 enterprise management software Synopsis: Internet Security Systems ISS X-Force discovered three vulnerabilities in the Computer Associates ControlIT enterprise management software package...

windows.weak.passwds.txt

Secure Storage of Secrets in Windows Aleph One [email protected] Mon, 17 May 1999 14:57:31 -0700 Not long ago we discussed why you still see messages that describe yet another application that stores passwords in an insecure manner, in particular under Windows. The bottom line was that there...

CVE-1999-1366

Pegasus e-mail client 3.0 and earlier uses weak encryption to store POP3 passwords in the pmail.ini file, which allows local users to easily decrypt the passwords and read e-mail...

CVE-1999-0407

By default, IIS 4.0 has a virtual directory /IISADMPWD which contains files that can be used as proxies for brute force password attacks, or to identify valid users on the system...

id Software Solaris Quake II 3.13/3.14 / QuakeWorld 2.0/2.1 / Quake 1.9/3.13/3.14 - Command Execution

// source: https://www.securityfocus.com/bid/90/info The Quake server has a feature where it allows administrators to remotely send commands to the Quake console with a password. However, it is possible to remotely bypass authentication. In order for this to be exploited, the attacker would have ...

7xx Router Password Buffer Overflow

...

CVE-1999-1275

Lotus cc:Mail release 8 stores the postoffice password in plaintext in a hidden file which has insecure permissions, which allows local users to gain privileges...

PT-1997-1142 · Microsoft · Windows Nt

Name of the Vulnerable Software and Affected Versions: Windows NT affected versions not specified Description: The issue concerns a Windows NT local user or administrator account that has a guessable password. Recommendations: For all affected versions, ensure that strong, unique passwords are se...

CVE-2024-36789

An issue in Netgear WNR614 JNR1010V2/N300-V1.1.0.541.0.1 allows attackers to create passwords that do not conform to defined security standards...

CVE-2024-36081

Westermo EDW-100 devices through 2024-05-03 allow an unauthenticated user to download a configuration file containing a cleartext password. NOTE: this is a serial-to-Ethernet converter that should not be placed at the edge of the network...