CVE-2000-1158

NAI Sniffer Agent uses base64 encoding for authentication, which allows attackers to sniff the network and easily decrypt usernames and passwords...

CVE-2000-1173

Microsys CyberPatrol uses weak encryption trivial encoding for credit card numbers and uses no encryption for the remainder of the information during registration, which could allow attackers to sniff network traffic and obtain this sensitive information...

CVE-2000-0378

The pamconsole PAM module in Linux systems performs a chown on various devices upon a user login, but an open file descriptor for those devices can be maintained after the user logs out, which allows that user to sniff activity on these devices when subsequent users log in...

CVE-2000-0378

The vulnerability CVE-2000-0378 affects the pam_console PAM module in Linux systems. It arises because the module performs a chown on various devices at user login, and an open file descriptor for those devices can remain open after logout. This allows the user to sniff activity on those devices ...

Remote Root Compromise On All RapidStream VPN Appliances

Date: 8-14-00 Time: 12:40p PST / You have been infected by the Bubonic Loki / OVERVIEW RapidStream has hard-coded the 'rsadmin' account into the sshd binary in the appliance OS. The account has been given a 'null' password in which password assignment and authentication was expected to be handled...

rapidstream.vpn.txt

Date: 8-14-00 Time: 12:40p PST OVERVIEW RapidStream has hard-coded the 'rsadmin' account into the sshd binary in the appliance OS. The account has been given a 'null' password in which password assignment and authentication was expected to be handled by the RapidStream software itself. The vendor...

NT admin password change algorithms expose user plaintext passwords

eye-catching subject line, huh? well, under specific circumstances, unfortunately, it's true. as it's now early morning, i shall be reasonably brief. conditions required if using NTLMv1 LmCompatibilibyLevel=0: - NT admin runs USRMGR.EXE or SRVMGR.EXE and either adds a new user, workstation or...

CVE-2000-0326

Meeting Maker uses weak encryption a polyalphabetic substitution cipher for passwords, which allows remote attackers to sniff and decrypt passwords for Meeting Maker accounts...

CVE-2000-0378

The pamconsole PAM module in Linux systems performs a chown on various devices upon a user login, but an open file descriptor for those devices can be maintained after the user logs out, which allows that user to sniff activity on these devices when subsequent users log in...

Symantec pcAnywhere 9.0 - Weak Encryption

// source: https://www.securityfocus.com/bid/1093/info Symantec pcAnywhere is shipped by default with a weak encryption scheme that is used to encrypt username and password transmittal. Therefore, usernames and password can be retrieved by anyone sniffing the network in between the host computer...

Symantec pcAnywhere 9.0 - Weak Encryption

Symantec pcAnywhere 9.0 - Weak Encryption // source: https://www.securityfocus.com/bid/1093/info Symantec pcAnywhere is shipped by default with a weak encryption scheme that is used to encrypt username and password transmittal. Therefore, usernames and password can be retrieved by anyone sniffing...

Citrix Metaframe 1.0/1.8 - Weak Encryption

// source: https://www.securityfocus.com/bid/1077/info The ICA protocol uses a simple XOR-based encryption algorthm to protect user credentials while stored or in transit. This encryption can be easily broken, meaning that anyone sniffing the connection can obtain user access to the server. The I...

CVE-1999-0530

A system is operating in "promiscuous" mode which allows it to perform packet sniffing...

CVE-2000-0086

The CVE-2000-0086 entry concerns Netopia Timbuktu Pro, where credentials (user IDs and passwords) are transmitted in cleartext, enabling eavesdroppers to obtain them via network sniffing. The available documents confirm the affected software and the root cause (unencrypted credential handling), w...

CVE-1999-0530

Technical details (affected products/versions, root cause, fixes) are not provided in the supplied documents. Monitor for updates.

CVE-2000-0086

Netopia Timbuktu Pro sends user IDs and passwords in cleartext, which allows remote attackers to obtain them via sniffing...

cisco-ios-identification.txt

Date: Mon, 18 Jan 1999 09:48:52 PST From: Mr. joej To: [email protected] Subject: Remote Cisco Identification Alpha Release: 0.9 Released Through: Rhino9 Team By: JoeJ Shouts: Horizon, apk-, NeonSurge, Xaphan ---------------------------------------------------------------- Intro: ------ This...

netscape.viewtrack.txt

Date: Sun, 6 Jun 1999 13:15:08 +0300 From: Georgi Guninski To: [email protected] Subject: Netscape Communicator code injection in JavaScript console using "view-source:" protocol There is a bug in Netscape Communicator 4.6 Win95, 4.07 Linux probably all 4.x are affected, which allows sniffing...

promail.1.21.trojan.txt

Date: Fri, 19 Mar 1999 09:41:18 +0100 From: Aeon Labs To: [email protected] Subject: security/privacy news Perhaps this might be of interest to Your readers. ProMail v1.21, an advanced freeware mail program spread through several worldwide distribution networks SimTel.net, Shareware.co...

netscape.4.51.url.sniffing.txt

Date: Thu, 25 Mar 1999 20:07:52 +0200 From: Georgi Guninski To: [email protected] Subject: Netscape Communicator 4.51 allows sniffing of URLs from another window There is a bug in Netscape Communicator 4.51,4.5/Win95, 4.08/WinNT probably others?, which allows sniffing URLs from another window...