2219 matches found
CVE-2000-0326
Meeting Maker uses weak encryption a polyalphabetic substitution cipher for passwords, which allows remote attackers to sniff and decrypt passwords for Meeting Maker accounts...
CVE-2000-0378
The pamconsole PAM module in Linux systems performs a chown on various devices upon a user login, but an open file descriptor for those devices can be maintained after the user logs out, which allows that user to sniff activity on these devices when subsequent users log in...
Symantec pcAnywhere 9.0 - Weak Encryption
Symantec pcAnywhere 9.0 - Weak Encryption // source: https://www.securityfocus.com/bid/1093/info Symantec pcAnywhere is shipped by default with a weak encryption scheme that is used to encrypt username and password transmittal. Therefore, usernames and password can be retrieved by anyone sniffing...
Symantec pcAnywhere 9.0 - Weak Encryption
// source: https://www.securityfocus.com/bid/1093/info Symantec pcAnywhere is shipped by default with a weak encryption scheme that is used to encrypt username and password transmittal. Therefore, usernames and password can be retrieved by anyone sniffing the network in between the host computer...
Citrix Metaframe 1.0/1.8 - Weak Encryption
// source: https://www.securityfocus.com/bid/1077/info The ICA protocol uses a simple XOR-based encryption algorthm to protect user credentials while stored or in transit. This encryption can be easily broken, meaning that anyone sniffing the connection can obtain user access to the server. The I...
CVE-2000-0086
The CVE-2000-0086 entry concerns Netopia Timbuktu Pro, where credentials (user IDs and passwords) are transmitted in cleartext, enabling eavesdroppers to obtain them via network sniffing. The available documents confirm the affected software and the root cause (unencrypted credential handling), w...
CVE-1999-0530
Technical details (affected products/versions, root cause, fixes) are not provided in the supplied documents. Monitor for updates.
CVE-1999-0530
A system is operating in "promiscuous" mode which allows it to perform packet sniffing...
CVE-2000-0086
Netopia Timbuktu Pro sends user IDs and passwords in cleartext, which allows remote attackers to obtain them via sniffing...
aimprotocol.txt
http://www.rootshell.com/ Author: [email protected] http://www.foo.org/aim/ A quick note: please, do not kick and scream if this is old news; I don't really watch these things and this is the first I've seen. AOL Instant Messenger doesn't seem to make too much a point of security. Security really isn...
cisco-ios-identification.txt
Date: Mon, 18 Jan 1999 09:48:52 PST From: Mr. joej To: [email protected] Subject: Remote Cisco Identification Alpha Release: 0.9 Released Through: Rhino9 Team By: JoeJ Shouts: Horizon, apk-, NeonSurge, Xaphan ---------------------------------------------------------------- Intro: ------ This...
netscape.4.51.url.sniffing.txt
Date: Thu, 25 Mar 1999 20:07:52 +0200 From: Georgi Guninski To: [email protected] Subject: Netscape Communicator 4.51 allows sniffing of URLs from another window There is a bug in Netscape Communicator 4.51,4.5/Win95, 4.08/WinNT probably others?, which allows sniffing URLs from another window...
netscape.datatrack.txt
Date: Sun, 6 Jun 1999 13:17:04 +0300 From: Georgi Guninski To: [email protected] Subject: Netscape Communicator code injection in JavaScript console using "data:" protocol There is a bug in Netscape Communicator 4.6 Win95, 4.07 Linux probably all 4.x are affected, which allows sniffing URLs fr...
netscape.viewtrack.txt
Date: Sun, 6 Jun 1999 13:15:08 +0300 From: Georgi Guninski To: [email protected] Subject: Netscape Communicator code injection in JavaScript console using "view-source:" protocol There is a bug in Netscape Communicator 4.6 Win95, 4.07 Linux probably all 4.x are affected, which allows sniffing...
promail.1.21.trojan.txt
Date: Fri, 19 Mar 1999 09:41:18 +0100 From: Aeon Labs To: [email protected] Subject: security/privacy news Perhaps this might be of interest to Your readers. ProMail v1.21, an advanced freeware mail program spread through several worldwide distribution networks SimTel.net, Shareware.co...
CVE-1999-1049
ARCserve NT agents use weak encryption XOR for passwords, which allows remote attackers to sniff the authentication request to port 6050 and decrypt the password...
CVE-1999-0530
A system is operating in "promiscuous" mode which allows it to perform packet sniffing...
PT-1999-1182 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: A system is operating in "promiscuous" mode, allowing it to perform packet sniffing. Recommendations: At the moment, there is no information about a newer version that contains a fix fo...