CVE-2003-1483

CVE-2003-1483 affects FlashFXP 1.4, where the password storage uses a weak encryption algorithm. The underlying issue is insecure password handling, enabling attackers to decrypt stored passwords and gain access. Public details consistently report this weakness without specifying exploitation sta...

CVE-2003-1483

FlashFXP 1.4 uses a weak encryption algorithm for user passwords, which allows attackers to decrypt the passwords and gain access...

CVE-2003-1447

IBM WebSphere Advanced Server Edition 4.0.4 uses a weak encryption algorithm XOR and base64 encoding, which allows local users to decrypt passwords when the configuration file is exported to XML...

Code injection

Microsoft ActiveSync 4.1, as used in Windows Mobile 5.0, uses weak encryption XOR obfuscation with a fixed key when sending the user's PIN/Password over the USB connection from the host to the device, which might make it easier for attackers to decode a PIN/Password obtained by 1 sniffing or 2...

CVE-2007-5460

Microsoft ActiveSync 4.1, as used in Windows Mobile 5.0, uses weak encryption XOR obfuscation with a fixed key when sending the user's PIN/Password over the USB connection from the host to the device, which might make it easier for attackers to decode a PIN/Password obtained by 1 sniffing or 2...

CVE-2007-5460

Microsoft ActiveSync 4.1 (used with Windows Mobile 5.0) contains a cryptographic weakness: PIN/Password is sent over USB using XOR obfuscation with a fixed key, enabling potential recovery of credentials if the host network is sniffed or the USB docking process is spoofed. Affected component/proc...

CVE-2007-5460

Microsoft ActiveSync 4.1, as used in Windows Mobile 5.0, uses weak encryption XOR obfuscation with a fixed key when sending the user's PIN/Password over the USB connection from the host to the device, which might make it easier for attackers to decode a PIN/Password obtained by 1 sniffing or 2...

PT-2007-6496 · Microsoft · Activesync

Name of the Vulnerable Software and Affected Versions: Microsoft ActiveSync version 4.1 Description: The issue concerns the use of weak encryption, specifically XOR obfuscation with a fixed key, when sending the user's PIN/Password over the USB connection from the host to the device. This might...

Linux kernel multiple security vulnerabilities

Kernel memory content leak in cpuset and setsockopt. Weak PRNG generator. GEODE-AES weak encryption key generation...

PT-2007-4044 · Php · Php

Name of the Vulnerable Software and Affected Versions: PHP affected versions not specified Description: A design error in the make http soap request function in PHP's soap extension causes it to call php rand r with an uninitialized variable, potentially leading to weak encryption of sensitive...

Symantec Norton Ghost multiple security vulnerabilities

Service Manager buffer oveflow, weak encryption...

EMC NetWorker管理控制台远程绕过认证漏洞

EMC NetWorker之前被称为Legato NetWorker，是一款跨平台的备份和恢复系统。 EMC NetWorker的管理控制台在连接到NetWorker备份服务器时使用了弱加密机制。如果远程攻击者了解这种认证机制的话，就可以通过中间人攻击扮演成为NetWorker管理控制台系统，以root用户权限连接到受影响的服务器。 EMC Networker 7.3.2 临时解决方法： 阻断对2638/tcp和2638/udp端口的访问。 厂商补丁： EMC --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Directory traversal

Kiwi CatTools before 3.2.0 beta uses weak encryption "reversible encoding" for passwords, account names, and IP addresses in kiwidb-cattools.kdb, which might allow local users to gain sensitive information by decrypting the file. NOTE: this issue could be leveraged with a directory traversal...

CVE-2007-0889

Kiwi CatTools before 3.2.0 beta uses weak encryption "reversible encoding" for passwords, account names, and IP addresses in kiwidb-cattools.kdb, which might allow local users to gain sensitive information by decrypting the file. NOTE: this issue could be leveraged with a directory traversal...

CVE-2007-0889

Kiwi CatTools before 3.2.0 beta uses weak encryption "reversible encoding" for passwords, account names, and IP addresses in kiwidb-cattools.kdb, which might allow local users to gain sensitive information by decrypting the file. NOTE: this issue could be leveraged with a directory traversal...

KLA10239 Multiple vulnerabilities in KIWI CatTools

A buffer overflow was found in Kingsoft Writer. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed WPS file. Below is a complete list of vulnerabilities 1. A directory traversal vulnerability can be...

CVE-2006-3204

Ultimate PHP Board UPB 1.9.6 and earlier uses a cryptographically weak block cipher with a large key collision space, which allows remote attackers to determine a suitable decryption key given the plaintext and ciphertext by obtaining the plaintext password, which is sent when logging in, and the...

Mathcad Password weak encryption

Area password is stored in base64...

CVE-2006-2206

The MS-Logon authentication scheme in UltraVNC aka Ultr@VNC 1.0.1 uses weak encryption XOR for challenge/response, which allows remote attackers to gain privileges by sniffing and decrypting passwords...

Authentication flaw

The MS-Logon authentication scheme in UltraVNC aka Ultr@VNC 1.0.1 uses weak encryption XOR for challenge/response, which allows remote attackers to gain privileges by sniffing and decrypting passwords...