Multiple bugs in Sun-One on Windows

JSP source code disclosure, crossite scripting, weak encryption...

Dameware weak encryotion

Session key is generated from static set...

Multiple vulnerabilities and Easter Eggs in HP Web JetAdmin

Unauthorized access, weak encryption, priviledge escalation...

Cisco IPSec group password weak encryption

Group password is stored cleartext in memory. Knowledge of group passwords allows to steal individual password from wire...

NetSupport School weak encryption

Password is stored in reversable encryption...

CVE-2004-1861

Invision NetSupport School Pro uses a weak encryption algorithm to encrypt passwords, which allows local users to obtain passwords...

Weak DameWare encryption

Weak PRNG is used for symmetric key generation, key is self is sent in cleartext among data...

CVE-2004-2134

Oracle toplink mapping workBench uses a weak encryption algorithm for passwords, which allows local users to decrypt the passwords...

OracleAS TopLink Mapping Workbench - Weak Encryption Algorithm

OracleAS TopLink Mapping Workbench - Weak Encryption Algorithm source: https://www.securityfocus.com/bid/9515/info OracleAS TopLink Mapping Workbench is a tool included with OracleAS TopLink, a Java-based database integration development framework that is included as a component of various Oracle...

OracleAS TopLink Mapping Workbench - Weak Encryption Algorithm

source: https://www.securityfocus.com/bid/9515/info OracleAS TopLink Mapping Workbench is a tool included with OracleAS TopLink, a Java-based database integration development framework that is included as a component of various Oracle Application Server releases. OracleAS TopLink Mapping Workbenc...

CVE-2003-1276

Netfone.exe of NetTelephone 3.5.6 uses weak encryption for user PIN's and stores user account numbers in plaintext in the HKEYCURRENTUSER\Software\MediaRing.com\SDK\NetTelephone\settings registry key, which could allow local users to gain unauthorized access to NetTelephone accounts...

CVE-2003-1447

IBM WebSphere Advanced Server Edition 4.0.4 uses a weak encryption algorithm XOR and base64 encoding, which allows local users to decrypt passwords when the configuration file is exported to XML...

CVE-2003-1391

RTS CryptoBuddy 1.0 and 1.2 uses a weak encryption algorithm for the passphrase and generates predictable keys, which makes it easier for attackers to guess the passphrase...

CVE-2003-1483

FlashFXP 1.4 uses a weak encryption algorithm for user passwords, which allows attackers to decrypt the passwords and gain access...

Issues In CGINews and CGIForum

Vendor : Markus Triska URL : http://triskam.virtualave.net/cginews.html Version : 1.07 And Possible Earlier & CGIForum 1.09 Risk : Weak Encryption & Info Disclosure Description: CGINews is a multi-user Web site news posting system written in Perl. Main features include: adding, updating, and...

CVE-2003-0270

The administration capability for Apple AirPort 802.11 wireless access point devices uses weak encryption XOR with a fixed key for protecting authentication credentials, which could allow remote attackers to obtain administrative access via sniffing when the capability is available via Ethernet o...

PalmVNC weak encryption

Passwords are stored in cleartext...

BlackMoon weak encryption

Passwords are stored in .mdb file...

CVE-2003-0270

The administration capability for Apple AirPort 802.11 wireless access point devices uses weak encryption XOR with a fixed key for protecting authentication credentials, which could allow remote attackers to obtain administrative access via sniffing when the capability is available via Ethernet o...

CVE-2003-0270

Apple AirPort Base Station (802.11) is affected by CVE-2003-0270. The administrative protocol on TCP 5009 uses XOR with a fixed key to protect credentials, allowing an attacker that can sniff traffic over Ethernet or non-WEP wireless to obtain administrative access. The flaw impacts confidentiali...