8918 matches found
CVE-2005-0517
The CVE-2005-0517 entry relates to PeerFTP_5: sensitive data (passwords) stored in plaintext in PeerFTP.ini, enabling local users to gain privileges. The available documents confirm the root cause as plaintext credential storage and local-privilege impact. No explicit patch/version details or exp...
CVE-2005-0521
CVE-2005-0521 affects SendLink 1.5. The issue arises because the product stores sensitive information—possibly passwords—in plaintext within the data.eat file, enabling local users to gain privileges. The available documentation does not disclose exploit vectors, in-the-wild exploitation, or conc...
CVE-2005-0522
CVE-2005-0522 affects Chat Anywhere 2.72a, where passwords are stored in plaintext in the chatroom’s INI file. This enables local users to gain privileges due to insecure credential storage (local privilege escalation). The available sources describe the root cause as plaintext storage, with no d...
CVE-2005-0518
eXeem 0.21 stores sensitive information such as passwords in plaintext in the Exeem registry key, which allows local users to gain privileges via the proxyuser and proxypassword values...
CVE-2005-0498
Gigafast router aka CompUSA router allows remote attackers to gain sensitive information and bypass the login page via a direct request to backup.cfg, which reveals the administrator password in plaintext...
CVE-2004-1497
Web Forums Server 1.6 and 2.0 Power Pack store passwords in plaintext in the Username.ini file, enabling local users to gain privileges. This indicates a local-privilege escalation risk due to insecure credential storage. The available sources describe the vulnerable component and impact but do n...
CVE-2004-1447
Jetbox One 2.0.8 (and possibly other versions) stores passwords in the database in plaintext, exposing user credentials. Root cause: plaintext credential storage in the data store, enabling potential disclosure if the database is accessed. CVE-2004-1447 is described with a Medium base score (AV:N...
CVE-2004-1447
Jetbox One 2.0.8 and possibly other versions stores passwords in the database in plaintext, which could allow attackers to gain sensitive information...
CVE-2005-0366
CVE-2005-0366 concerns OpenPGP/GnuPG where the integrity check feature, when decrypting a message encrypted with CF B mode, can allow a remote attacker to recover part of the plaintext through a chosen-ciphertext attack if the first two bytes of a message block are known and an oracle reveals whe...
CVE-2005-0366
The integrity check feature in OpenPGP, when handling a message that was encrypted using cipher feedback CFB mode, allows remote attackers to recover part of the plaintext via a chosen-ciphertext attack when the first 2 bytes of a message block are known, and an oracle or other mechanism is...
Cisco IDS Plaintext Telnet Service Detection
Binary data 2584.prm...
UW-IMAP CRAM-MD5 Remote Authentication Bypass
There is a flaw in the remote UW-IMAP server which allows an authenticated user to log into the server as any user. The flaw is in the CRAM-MD5 authentication theme. An attacker, exploiting this flaw, would only need to identify a vulnerable UW-IMAP server which had enabled the CRAM-MD5...
CVE-2004-1171
KDE 3.2.x and 3.3.0 through 3.3.2, when saving credentials that are 1 manually entered by the user or 2 created by the SMB protocol handler, stores those credentials for plaintext in the user's .desktop file, which may be created with world-readable permissions, which could allow local users to...
CVE-2004-1171
KDE 3.2.x and 3.3.0 through 3.3.2, when saving credentials that are 1 manually entered by the user or 2 created by the SMB protocol handler, stores those credentials for plaintext in the user's .desktop file, which may be created with world-readable permissions, which could allow local users to...
IBM DB2 Windows Permission Problems (#NISR05012005F)
NGSSoftware Insight Security Research Advisory Name: IBM DB2 Windows Permission Problems Systems Affected: DB2 8.1 Severity: High risk from local Vendor URL: http://www.ibm.com/ Author: Chris Anley chris at ngssoftware.com Relates to: http://www.ngssoftware.com/advisories/db2-02.txt Date of Publi...
CVE-2004-2578
phpGroupWare before 0.9.16.002 transmits the 1 header admin and 2 setup passwords in plaintext via cookies, which allows remote attackers to sniff passwords...
CVE-2004-2708
Gyach Enhanced Gyach-E before 1.0.0 stores passwords in plaintext, which allows attackers to obtain user passwords by reading the configuration file...
CVE-2004-1447
Jetbox One 2.0.8 and possibly other versions stores passwords in the database in plaintext, which could allow attackers to gain sensitive information...
CVE-2004-2397
The web-based Management Console in Blue Coat Security Gateway OS 3.0 through 3.1.3.13 and 3.2.1, when importing a private key, stores the key and its passphrase in plaintext in a log file, which allows attackers to steal digital certificates...