8904 matches found
Web Wiz Site News 3.6 - Information Disclosure
source: https://www.securityfocus.com/bid/7341/info Web Wiz Site News has been reported prone to sensitive information disclosure vulnerability. An attacker may make a request for and download the underlying Access database file that is used by the Site News appplication. Site News administration...
Ocean12 ASP Guestbook Manager 1.0 - Information Disclosure
source: https://www.securityfocus.com/bid/7328/info Ocean12 Guestbook Manager has been reported prone to sensitive information disclosure vulnerability. An attacker may make a request for and download the underlying Access database file that is used by the Guestbook Manager. Guestbook...
Ocean12 ASP Guestbook Manager 1.0 - Information Disclosure
Ocean12 ASP Guestbook Manager 1.0 - Information Disclosure source: https://www.securityfocus.com/bid/7328/info Ocean12 Guestbook Manager has been reported prone to sensitive information disclosure vulnerability. An attacker may make a request for and download the underlying Access database file...
CVE-2002-0810
Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, directs error messages from the syncshadowdb command to the HTML output, which could leak sensitive information, including plaintext passwords, if syncshadowdb fails...
CVE-1999-1337
FTP client in Midnight Commander mc before 4.5.11 stores usernames and passwords for visited sites in plaintext in the world-readable history file, which allows other local users to gain privileges...
CVE-2002-1521
Web Server 4D WS4D 3.6 stores passwords in plaintext in the Ws4d.4DD file, which allows attackers to gain privileges...
CVE-2002-1491
The Cisco VPN 5000 Client for MacOS before 5.2.2 records the most recently used login password in plaintext when saving "Default Connection" settings, which could allow local users to gain privileges...
CVE-1999-1337
CVE-1999-1337 affects Midnight Commander (mc) before 4.5.11. The FTP client stores visited-site usernames/passwords in plaintext in the world-readable history file, enabling local users to gain partial privileges. Root cause: insecure plaintext history storage. Impact: local privilege elevation/p...
CVE-2002-1530
The administrative web interface STEMWADM for SurfControl SuperScout Email Filter allows users to obtain usernames and plaintext passwords via a request to the userlist.asp program, which includes the passwords in a user editing form...
[SECURITY] [DSA 273-1] New krb4 packages fix authentication failure
-------------------------------------------------------------------------- Debian Security Advisory DSA 273-1 [email protected] http://www.debian.org/security/ Martin Schulze March 28th, 2003 http://www.debian.org/security/faq -...
DSA-273 krb4 - Cryptographic weakness
Bulletin has no description...
[SECURITY] [DSA 269-1] New heimdal packages fix authentication failure
-------------------------------------------------------------------------- Debian Security Advisory DSA 269-1 [email protected] http://www.debian.org/security/ Martin Schulze March 26th, 2003 http://www.debian.org/security/faq -...
DSA-269 heimdal - Cryptographic weakness
Bulletin has no description...
CVE-2003-0138
Version 4 of the Kerberos protocol krb4, as used in Heimdal and other packages, allows an attacker to impersonate any principal in a realm via a chosen-plaintext attack...
DEBIAN-CVE-2003-0138
Version 4 of the Kerberos protocol krb4, as used in Heimdal and other packages, allows an attacker to impersonate any principal in a realm via a chosen-plaintext attack...
CVE-2003-0138
Version 4 of the Kerberos protocol krb4, as used in Heimdal and other packages, allows an attacker to impersonate any principal in a realm via a chosen-plaintext attack...
CVE-2003-0138
Version 4 of the Kerberos protocol krb4, as used in Heimdal and other packages, allows an attacker to impersonate any principal in a realm via a chosen-plaintext attack...
CVE-2003-0138
Version 4 of the Kerberos protocol krb4, as used in Heimdal and other packages, allows an attacker to impersonate any principal in a realm via a chosen-plaintext attack...
CVE-2003-0138
CVE-2003-0138 affects Version 4 of the Kerberos protocol (krb4) as used in Heimdal and related packages. The vulnerability enables an attacker to impersonate any principal in a realm via a chosen-plaintext attack, exposing authentication to impersonation within that realm. The provided documents ...
CVE-2002-1449
CVE-2002-1449 affects eUpload 1.0, where the password.txt file is stored in plaintext under the web document root. This plaintext password file enables remote attackers to overwrite arbitrary files by reading password.txt. The available documents specify the vulnerability and impact but do not pr...