2012 matches found
CVE-2009-0216: Undefined Security Weakness
GE Fanuc iFIX 5.0 and earlier relies on client-side authentication involving a weakly encrypted local password file, which allows remote attackers to bypass intended access restrictions and start privileged server login sessions by recovering a password or by using a modified program module...
TYPO3多个远程安全漏洞
BUGTRAQ ID: 33376 Typo3是开源内容管理系统（CMS）和内容管理框架（CMF）。 Typo3的实现上存在多个远程安全漏洞，可能导致用户控制Typo3或运行其上的操作系统。包括： 1. 创建弱的加密密钥 2. 认证绕过 3. 不安全的会话管理 4. 跨站脚本执行 5. 远程命令执行 TYPO3版本低于4.0.10、4.1.8、4.2.4的软件受漏洞影响。 TYPO3 TYPO3 ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://typo3.org/...
PT-2009-1004 · Typo3 · Typo3
Name of the Vulnerable Software and Affected Versions: TYPO3 versions 4.0.0 through 4.0.9 TYPO3 versions 4.1.0 through 4.1.7 TYPO3 versions 4.2.0 through 4.2.3 Description: The issue allows attackers to compromise the confidentiality, integrity, and availability of protected information. It can b...
CVE-2009-0255: Use of Insufficiently Random Values
The System extension Install tool in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 creates the encryption key with an insufficiently random seed, which makes it easier for attackers to crack the key...
TYPO3 sa-2009-001 Weak Encryption Key File Disclosure
This module exploits a flaw in TYPO3 encryption ey creation process to allow for file disclosure in the jumpUrl mechanism. This flaw can be used to read any file that the web server user account has access to view. Module Options msf use auxiliary/admin/http/typo3/sa2009001 msf undefinedsa2009001...
Default credentials
Adobe Acrobat 9 uses more efficient encryption than previous versions, which makes it easier for attackers to guess a document's password via a brute-force attack...
CVE-2008-4368: Undefined Security Weakness
The default configuration of Java 1.5 on Apple Mac OS X 10.5.4 and 10.5.5 contains a jurisdiction policy that limits Java Cryptography Extension JCE key sizes to 128 bits, which makes it easier for attackers to decrypt ciphertext produced by JCE...
Gentoo Security Advisory GLSA 200603-15 (crypt-cbc)
The remote host is missing updates announced in advisory GLSA 200603-15. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Design/Logic Flaw
Folder Lock 5.9.5 and earlier uses weak encryption ROT-25 for the password, which allows local administrators to obtain sensitive information by reading and decrypting the QualityControl\pack registry value...
CVE-2008-3775
Folder Lock 5.9.5 and earlier uses weak encryption ROT-25 for the password, which allows local administrators to obtain sensitive information by reading and decrypting the QualityControl\pack registry value...
CVE-2008-3775
Folder Lock 5.9.5 and earlier uses weak encryption ROT-25 for the password, which allows local administrators to obtain sensitive information by reading and decrypting the QualityControl\pack registry value...
CVE-2008-3775
Folder Lock 5.9.5 and earlier uses weak encryption ROT-25 for the password, which allows local administrators to obtain sensitive information by reading and decrypting the QualityControl\pack registry value...
CVE-2008-3775
Folder Lock 5.9.5 and earlier is affected. The issue is the use of weak password encryption (ROT-25), which allows local administrators to obtain sensitive information by reading and decrypting the QualityControl_pack registry value. No patch/versioned fix is specified in the provided documents. ...
CVE-2008-3775: Use of a Broken or Risky Cryptographic Algorithm
Folder Lock 5.9.5 and earlier uses weak encryption ROT-25 for the password, which allows local administrators to obtain sensitive information by reading and decrypting the QualityControl\pack registry value...
PT-2008-5134 · Newsoft · Folder Lock
Name of the Vulnerable Software and Affected Versions: Folder Lock versions 5.9.5 and earlier Description: The issue concerns the use of weak encryption, specifically ROT-25, for password protection. This weakness allows local administrators to access sensitive information by reading and decrypti...
Low: Red Hat Security Advisory: Red Hat Network Satellite Server security update
Red Hat Network Satellite Server version 5.1.1 is now available. This update includes fixes for a number of security issues in Red Hat Network Satellite Server components. This update has been rated as having low security impact by the Red Hat Security Response Team. During an internal security...
IPSwitch IMail Server <= 8.1 Local Password Decryption Utility
No description provided by source. / IpSwitch IMail Server = ver 8.1 User Password Decryption by Adik netmaniac hotmail KG IpSwitch IMail Server uses weak encryption algorithm to encrypt its user passwords. It uses polyalphabetic Vegenere cipher to encrypt its user passwords. This encryption sche...
DUC NO-IP weak encryption
Password is stored in world-readable registry entry in reversable encryption form...
CVE-2008-2299: Undefined Security Weakness
Unspecified vulnerability in SecureICA and ICA Basic encryption of Citrix Presentation Server 4.5 and earlier, Access Essentials 2.0 and earlier, and Desktop Server 1.0 can cause clients to use weaker encryption settings than configured by the administrator, which might allow attackers to bypass...