Debian DSA-273-1 : krb4 - Cryptographic weakness

A cryptographic weakness in version 4 of the Kerberos protocol allows an attacker to use a chosen-plaintext attack to impersonate any principal in a realm. Additional cryptographic weaknesses in the krb4 implementation permit the use of cut-and-paste attacks to fabricate krb4 tickets for...

Microsoft Winerr Plaintext Report Detection

Binary data 2298.prm...

CVE-2003-0007

CVE-2003-0007: Microsoft Outlook 2002 fails to properly handle requests to encrypt emails using V1 Exchange Server Security certificates, causing the message to be sent in plaintext. The connected documents corroborate the affected product and the underlying issue as described, but do not provide...

CVE-2002-1521

CVE-2002-1521 concerns Web Server 4D (WS4D) 3.6 or lower, which stores usernames and passwords in plaintext in the Ws4d.4DD file. The vulnerability enables a local attacker to gain privileges on the affected host by accessing the credential data. OpenVAS entries corroborate the 3.6-era behavior a...

CVE-2002-1530

The administrative web interface STEMWADM for SurfControl SuperScout Email Filter allows users to obtain usernames and plaintext passwords via a request to the userlist.asp program, which includes the passwords in a user editing form...

CVE-2002-1491

The Cisco VPN 5000 Client for MacOS before 5.2.2 records the most recently used login password in plaintext when saving "Default Connection" settings, which could allow local users to gain privileges...

CVE-2002-1479

Cacti before 0.6.8 stores a MySQL username and password in plaintext in config.php, which has world-readable permissions, which allows local users to modify databases as the Cacti user and possibly gain privileges...

CVE-2002-1096

Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.1, allows restricted administrators to obtain user passwords that are stored in plaintext in HTML source code...

CVE-2002-1479

Cacti before 0.6.8 stores a MySQL username and password in plaintext in config.php with world-readable permissions. This allows local users to modify databases as the Cacti user and potentially gain privileges. Affected product: Cacti (versions prior to 0.6.8). Root cause: credentials stored in p...

CVE-2002-1097

Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.2, allows restricted administrators to obtain certificate passwords that are stored in plaintext in the HTML source code for Certificate Management pages...

CVE-2002-1521

Web Server 4D WS4D 3.6 stores passwords in plaintext in the Ws4d.4DD file, which allows attackers to gain privileges...

CVE-2002-1491

Cisco VPN 5000 Client for macOS before 5.2.2 stores the most recently used login password in plaintext when saving Default Connection settings, enabling local users to potentially gain privileges. Affected: MacOS client; root cause: plaintext storage of MRU password; impact: local privilege eleva...

CVE-2002-1097

Cisco VPN 3000 Concentrator is affected (versions 2.2.x and 3.x before 3.5.2). The issue is that certificate passwords are stored in plaintext in the HTML source of Certificate Management pages, allowing restricted administrators to access them. The documented fix is upgrading to 3.5.2 or later. ...

CVE-2002-1530

The CVE concerns SurfControl SuperScout Email Filter, specifically its administrative web interface STEMWADM. A vulnerability in the userlist.asp page allows an attacker to retrieve usernames and plaintext passwords via the user editing form, exposing credential data through the management UI. Th...

CVE-2001-1098

The CVE-2001-1098 entry applies to Cisco PIX Firewall Manager (PFM) 4.3(2)g. The vulnerability arises because the enable password is stored/logged in plaintext in the pfm.log, potentially allowing local users to read and obtain the enable password. Affected behavior: local access to the password ...

CVE-2002-1479

Cacti before 0.6.8 stores a MySQL username and password in plaintext in config.php, which has world-readable permissions, which allows local users to modify databases as the Cacti user and possibly gain privileges...

MaxDB WebSQL < 7.5.00.18 Remote Overflow

Binary data 2528.prm...

Java Remote Management Platform Plaintext Password Detection

Binary data 4586.prm...

IBM DB2 9.x < 9 Fix Pack 5 Multiple Vulnerabilities

Binary data 4536.prm...

CVSTrac Database Plaintext Password Storage

The remote host seems to be running cvstrac, a web-based bug and patch-set tracking system for CVS. This version contains a flaw related to .db files that may allow an attacker to gain access to plaintext passwords. Nessus has determined the vulnerability exists on the target simply by looking at...