5751 matches found
POP3 Unencrypted Cleartext Login
The remote host is running a POP3 daemon that allows cleartext logins over unencrypted connections. NOTE: Depending on the POP3 server configuration valid credentials needs to be given to the settings of SPDX-FileCopyrightText: 2004 George A. Theall Some text descriptions might be excerpted from ...
POP2 Unencrypted Cleartext Login
The remote host is running a POP2 daemon that allows cleartext logins over unencrypted connections. SPDX-FileCopyrightText: 2005 George A. Theall Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
Cisco wireless accee points LWAPP mode unauthorized access
It's possible to send unencrypted packet with spoofed MAC to secure network...
Cisco Airespace Wireless LAN Controllers Allow Unencrypted Network Access
...
NetForce NIS password information leak
File with NIS accounts passwords is sent with unencrypted diagnostic e-mail message...
CVE-2002-1848
TightVNC prior to 1.2.4 on Windows stores unencrypted passwords in the WinVNC Properties dialog password field, enabling local users to access passwords. Affected component: WinVNC password storage within the Windows UI; root cause is unencrypted plaintext storage. Impact: local disclosure of cre...
CVE-2002-1848
TightVNC before 1.2.4 running on Windows stores unencrypted passwords in the password text control of the WinVNC Properties dialog, which could allow local users to access passwords...
firefly_pass_recovery.txt
--------------------- Application: --------------------- FireFly 1.0 --------------------- Introduction: --------------------- Vendor: NetCruiser Software www.netcruiser-software.com Vendor Description: Firefly is a Windows application that allows you to share files with other users. Firefly uses...
CVE-2004-1709
Datakey Rainbow iKey2032 USB token, when using the CIP client package, does not encrypt communications between the token and the driver, which could allow local users to obtain the PINs of other users...
POP3 Cleartext Logins Permitted
The remote host is running a POP3 daemon that allows cleartext logins over unencrypted connections. An attacker can uncover user names and passwords by sniffing traffic to the POP3 daemon if a less secure authentication mechanism eg, USER command, AUTH PLAIN, AUTH LOGIN is used. Note: This plugin...
POP2 Cleartext Logins Permitted
The remote host is running a POP2 daemon that allows cleartext logins over unencrypted connections. An attacker can uncover login names and passwords by sniffing traffic to the POP2 daemon. This script was written by George A. Theall, . See the Nessus Scripts License for details. Changes by...
IMAP Service Cleartext Login Permitted
The remote host is running an IMAP daemon that allows cleartext logins over unencrypted connections. An attacker can uncover user names and passwords by sniffing traffic to the IMAP daemon if a less secure authentication mechanism eg, LOGIN command, AUTH=PLAIN, AUTH=LOGIN is used. This script was...
Webroot Spy Sweeper weak encryption
Password is stored in registry uencrypted...
CVE-1999-1537
IIS 3.x and 4.x does not distinguish between pages requiring encryption and those that do not, which allows remote attackers to cause a denial of service resource exhaustion via SSL requests to the HTTPS port for normally unencrypted files, which will cause IIS to perform extra work to send the...
CVE-2002-1152
Konqueror in KDE 3.0 through 3.0.2 does not properly detect the "secure" flag in an HTTP cookie, which could cause Konqueror to send the cookie across an unencrypted channel, which could allow remote attackers to steal the cookie via sniffing...
CVE-2002-1152
CVE-2002-1152 concerns Konqueror (KDE) versions 3.0 through 3.0.2. The issue is that Konqueror does not reliably detect the secure flag on HTTP cookies, allowing cookies to be sent over unencrypted channels. This could enable remote attackers to capture cookies via sniffing, potentially compromis...
Compulsive Media CNU5 - News.mdb Database Disclosure
Compulsive Media CNU5 - News.mdb Database Disclosure source: https://www.securityfocus.com/bid/11004/info CNU5 is reported prone to a database disclosure vulnerability. It is reported that remote users may download the database file 'news.mdb' and gain access to sensitive information including...
Compulsive Media CNU5 - 'News.mdb' Database Disclosure
source: https://www.securityfocus.com/bid/11004/info CNU5 is reported prone to a database disclosure vulnerability. It is reported that remote users may download the database file 'news.mdb' and gain access to sensitive information including unencrypted authentication credentials. CNU5 version 1....
vulnerabilities in JetboxOne CMS
ECHOADV03$2004 --------------------------------------------------------------------------- vulnerabilities in JetboxOne CMS --------------------------------------------------------------------------- Author: y3dips Date: August, 4th 2004 Location: Indonesia, Jakarta Web:...