1667 matches found
CVE-1999-1540
CVE-1999-1540 affects Cactus Software Shell Lock, where weak encryption (trivial encoding) enables local attackers to decrypt and obtain the source code. According to NVD, the baseline impact is Partial confidentiality with no integrity or availability impact, and the exploit is local with low ov...
CVE-1999-1049
ARCserve NT agents use weak encryption XOR for passwords, which allows remote attackers to sniff the authentication request to port 6050 and decrypt the password...
CVE-1999-1540
shell-lock in Cactus Software Shell Lock uses weak encryption trivial encoding which allows attackers to easily decrypt and obtain the source code...
CVE-1999-1271
CVE-1999-1271 concerns Macromedia Dreamweaver, where credentials for FTP are stored with weak encryption. The root cause is weak encryption that enables local users to decrypt other users’ FTP passwords. The entry provides a high-level impact on confidentiality (partial) but does not specify affe...
CVE-1999-1497
Ipswitch IMail 5.0 and 6.0 store e‑mail account passwords in registry keys using weak encryption, allowing local attackers to read passwords. Affected component: registry storage of credentials; Root cause: weak cryptography. Impact: local confidentiality and integrity compromise. CVSS base score...
CVE-1999-1078
The CVE applies to Ipswitch WS_FTP Pro (6.0) where passwords are stored with weak encryption in initialization files. This enables a remote attacker to decrypt stored passwords and potentially gain privileges. OpenVAS and Nessus entries corroborate weak stored password issues in WS_FTP Pro/Client...
CVE-2001-1005
Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA uses weak encryption to store the user password in a registry key, which allows attackers who have access to the registry key to decrypt the password and gain privileges...
CVE-2001-1003
Respondus 1.1.2 for WebCT uses weak encryption to remember usernames and passwords, which allows local users who can read the WEBCT.SVR file to decrypt the passwords and gain additional privileges...
CVE-2001-0983
UltraEdit uses weak encryption to record FTP passwords in the uedit32.ini file, which allows local users who can read the file to decrypt the passwords and gain privileges...
Respondus v1.1.2 stores passwords using weak encryption
Respondus Version 1.1.2 7-26-2001 stores passwords using weak encryption. Synopsis: If you have Respondus remember your userid and password it will store them in the WEBCT.SVR file in the "Respondus Projects" directory. The information is "encrypted" by taking the ASCII value of each password...
Слабое шифрование паролей в Respondus (weak encryption)
Для хранения паролей исопльзуется xor с константной строкой...
UltraEdit 8.2 - FTP Client Weak Password Encryption
source: https://www.securityfocus.com/bid/3234/info UltraEdit is a multi-featured commercial text editor with support for HTML, C/C++, VB, Java, Perl, XML, and C. It also includes a hex editor and a small FTP client. UltraEdit's FTP client has a feature which will remember FTP passwords for later...
UltraEdit 8.2 - FTP Client Weak Password Encryption
UltraEdit 8.2 - FTP Client Weak Password Encryption source: https://www.securityfocus.com/bid/3234/info UltraEdit is a multi-featured commercial text editor with support for HTML, C/C++, VB, Java, Perl, XML, and C. It also includes a hex editor and a small FTP client. UltraEdit's FTP client has a...
CVE-2001-0586
TrendMicro ScanMail for Exchange 3.5 Evaluation allows a local attacker to recover the administrative credentials for ScanMail via a combination of unprotected registry keys and weakly encrypted passwords...
Уязвимости Arkeia Backup (weak encryption)
Весь протокол обмена трафиком между клиентом и сервером не зашифрован. Используются стандартные DES-пароли...
Проблемы с паролем в SurgeFTP (bruteforceing, weak password).
пароль имеет слабое шифрование, кроме того не ограничено число попыток его ввода...
CVE-2001-1260
Avaya Argent Office uses weak encryption trivial encoding for passwords, which allows remote attackers to gain administrator privileges by sniffing and decrypting the sniffing the passwords during a system reboot...
scx-sa-21.txt
============================================================================ Securax-SA-21 Security Advisory belgian.networking.security Dutch ============================================================================ Topic: CuteFTP uses a weak password encoding scheme Announced: 2001-08-01...