CVE-2001-1546

Pathways Homecare 6.5 uses weak encryption for user names and passwords, which allows local users to gain privileges by recovering the passwords from the pwhc.ini file...

PT-2001-2631 · Pathways · Pathways Homecare

Name of the Vulnerable Software and Affected Versions: Pathways Homecare version 6.5 Description: The issue concerns the use of weak encryption for user names and passwords. This weakness allows local users to gain privileges by recovering the passwords from the pwhc.ini file. Recommendations: Fo...

McKesson Pathways Homecare 6.5 - Weak Username and Password Encryption

McKesson Pathways Homecare 6.5 - Weak Username and Password Encryption source: https://www.securityfocus.com/bid/3653/info McKesson Pathways Homecare is a client/server application which is used to track patient information, billing information and medical records for home care patients. The...

McKesson Pathways Homecare 6.5 - Weak 'Username' and Password Encryption

source: https://www.securityfocus.com/bid/3653/info McKesson Pathways Homecare is a client/server application which is used to track patient information, billing information and medical records for home care patients. The administrative username and password are encrypted in the pwhc.ini file on...

Проблемы с Secure Password Authentication в Outlook Express (weak encryption)

Авторизацию в Outlook Expres можно использовать для доступа к корпоративным ресурсам...

Слабое шифрование в PHP-Nuke (weak encryption)

Вместо исопльзование сеансовых cookie, cookie содержат пароль администратора в base64...

Уязвимости в авторизации Yahoo Messanger (weak encryption)

Пароль передается в формате cryp без механизма challenge-response что делает возможным replay-атаки и атаки на перебор...

Слабое шифрование в Datek Streamer (weak encryption)

Часть важных данных о пользователе уходит по незащищенному каналу...

Открытые пароли в Pc-to-Phone (weak encryption)

Пароли хранятся в общедоступном месте...

CVE-2001-1151

Trend Micro OfficeScan Corporate Edition aka Virus Buster 3.53 allows remote attackers to access sensitive information from the hotdownload directory without authentication, such as the ofcscan.ini configuration file, which contains a weakly encrypted password...

CVE-1999-1101

CVE-1999-1101 concerns the Kabsoftware Lydia utility, which stores user passwords in the lydia.ini file using weak encryption. This storage method allows local users to decrypt the passwords and potentially gain privileges. The root cause, as described, is the weak encryption used for password st...

CVE-1999-1271

Macromedia Dreamweaver uses weak encryption to store FTP passwords, which could allow local users to easily decrypt the passwords of other users...

CVE-1999-1101

Kabsoftware Lydia utility uses weak encryption to store user passwords in the lydia.ini file, which allows local users to easily decrypt the passwords and gain privileges...

CVE-1999-1078

WSFTP Pro 6.0 uses weak encryption for passwords in its initialization files, which allows remote attackers to easily decrypt the passwords and gain privileges...

CVE-1999-1366

CVE-1999-1366 affects Pegasus Mail client (Pegasus e-mail client) 3.0 and earlier. The vulnerability arises from storing POP3 passwords in pmail.ini with weak encryption, allowing local users to decrypt passwords and read e-mail. The provided documents do not include an official fix or remediatio...

CVE-1999-1049

ARCserve NT agents authenticate using a weak XOR scheme for passwords. The vulnerability allows remote attackers to sniff the authentication request sent to port 6050 and decrypt the password, leading to potential unauthorized access and confidentiality/ integrity impact as described in the CVE e...

CVE-1999-1543

MacOS uses weak encryption for passwords that are stored in the Users & Groups Data File...

CVE-1999-1543

CVE-1999-1543 affects macOS where passwords stored in the Users & Groups Data File are protected by weak encryption. Root cause: weak encryption of password storage. Impact per available data: partial confidentiality, partial integrity, and partial availability if an attacker has local access. Ex...

CVE-1999-1497

Ipswitch IMail 5.0 and 6.0 uses weak encryption to store passwords in registry keys, which allows local attackers to read passwords for e-mail accounts...

CVE-1999-1366

Pegasus e-mail client 3.0 and earlier uses weak encryption to store POP3 passwords in the pmail.ini file, which allows local users to easily decrypt the passwords and read e-mail...