PT-2014-3204

Name of the Vulnerable Software and Affected Versions OpenText Exceed OnDemand EoD version 8 Description The issue concerns the use of weak encryption for passwords, making it easier for remote attackers to discover credentials by sniffing the network or for local users to discover credentials by...

CVE-2013-6805: Undefined Security Weakness

OpenText Exceed OnDemand EoD 8 uses weak encryption for passwords, which makes it easier for 1 remote attackers to discover credentials by sniffing the network or 2 local users to discover credentials by reading a .eod8 file...

PT-2014-18: Weak encryption of account data in Wonderware Information Server

The specialists of the Positive Research center have detected a Weak encryption of account data vulnerability in Wonderware Information Server. Encryption of WIS is insufficient. This vulnerability could allow elevation of privileges if an attacker decrypts the credentials. The system would need ...

PT-2014-17: Weak encryption of account data in Wonderware Information Server

The specialists of the Positive Research center have detected a Weak encryption of account data vulnerability in Wonderware Information Server. Encryption of WIS is insufficient. This vulnerability could allow elevation of privileges if an attacker decrypts the credentials. The system would need ...

PowerArchiver weak encrption

Native ZIP encryption is used instead of AES...

ConeXware PowerArchiver弱加密漏洞

Bugtraq ID:66174 CVE ID:CVE-2014-2319 ConeXware PowerArchiver是一款压缩工具。 如果在GUI中用户选择AES加密，ConeXware PowerArchiver会以不安全加密方法来创建文件。如选择"AES 256-bit"进行加密软件会使用PKZIP加密来代替。 0 ConeXware PowerArchiver 14.02.03 ConeXware PowerArchiver 14.02.05已经修复该漏洞，建议用户下载更新： http://www.powerarchiver.com...

Ransomware Scam Plagued by Weak Crypto

A new piece of ransomware that emerged earlier this month is encrypting its victim’s files with an easily breakable cryptographic algorithm. BitCrypt, as it is known, purports to lock down files with 1024-bit RSA encryption but actually only deploys a much weaker 426-bit key. According to...

Portable Executable Files With Weak Encryption (CVE-2013-3900)

Portable Executable PE files can contain encrypted data. PE files with weak data encryption can be decrypted to manipulate the data. There are cases in which certain traffic, although not intended for malicious use, is very unsafe, since it may transfer shellcode which is undetectable by IPS...

MS KB2868725: Update for Disabling RC4

The remote host is missing KB2868725, an update for disabling the weak RC4 cipher suite. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid70854; scriptversion"1.3"; scriptcvsdate"Date: 2018/11/15 20:50:28"; scriptxrefname:"MSKB", value:"2868725"; scriptnameenglish:"MS...

CVE-2013-4134

OpenAFS before 1.4.15, 1.6.x before 1.6.5, and 1.7.x before 1.7.26 uses weak encryption DES for Kerberos keys, which makes it easier for remote attackers to obtain the service key...

CVE-2013-4134

OpenAFS before 1.4.15, 1.6.x before 1.6.5, and 1.7.x before 1.7.26 uses weak encryption DES for Kerberos keys, which makes it easier for remote attackers to obtain the service key...

DEBIAN-CVE-2013-4134

OpenAFS before 1.4.15, 1.6.x before 1.6.5, and 1.7.x before 1.7.26 uses weak encryption DES for Kerberos keys, which makes it easier for remote attackers to obtain the service key...

Design/Logic Flaw

OpenAFS before 1.4.15, 1.6.x before 1.6.5, and 1.7.x before 1.7.26 uses weak encryption DES for Kerberos keys, which makes it easier for remote attackers to obtain the service key...

CVE-2013-4134

OpenAFS before 1.4.15, 1.6.x before 1.6.5, and 1.7.x before 1.7.26 uses weak encryption DES for Kerberos keys, which makes it easier for remote attackers to obtain the service key...

CVE-2013-4134

OpenAFS before 1.4.15, 1.6.x before 1.6.5, and 1.7.x before 1.7.26 uses weak encryption DES for Kerberos keys, which makes it easier for remote attackers to obtain the service key...

CVE-2013-4134

OpenAFS is affected by CVE-2013-4134 due to weak DES encryption for Kerberos keys. Affected versions: OpenAFS before 1.4.15, 1.6.x before 1.6.5, and 1.7.x before 1.7.26. Impact: remote attackers could obtain the service key. Remediation: upgrade to the fixed versions (OpenAFS 1.4.15+, 1.6.5+, or ...

CVE-2013-4134

OpenAFS before 1.4.15, 1.6.x before 1.6.5, and 1.7.x before 1.7.26 uses weak encryption DES for Kerberos keys, which makes it easier for remote attackers to obtain the service key...

CVE-2013-4134

OpenAFS before 1.4.15, 1.6.x before 1.6.5, and 1.7.x before 1.7.26 uses weak encryption DES for Kerberos keys, which makes it easier for remote attackers to obtain the service key...

PT-2013-1207

Name of the Vulnerable Software and Affected Versions OpenAFS versions prior to 1.4.15 OpenAFS versions 1.6.x prior to 1.6.5 OpenAFS versions 1.7.x prior to 1.7.26 Description The issue is related to the use of weak encryption, specifically DES, for Kerberos keys in OpenAFS. This weakness makes i...

CVE-2013-4134: Undefined Security Weakness

OpenAFS before 1.4.15, 1.6.x before 1.6.5, and 1.7.x before 1.7.26 uses weak encryption DES for Kerberos keys, which makes it easier for remote attackers to obtain the service key...