1667 matches found
CVE-2001-1142
ArGoSoft FTP Server 1.2.2.2 uses weak encryption for user passwords, which allows an attacker with access to the password file to gain privileges...
CVE-2001-0382
Computer Associates CCC\Harvest 5.0 for Windows NT/2000 uses weak encryption for passwords, which allows a remote attacker to gain privileges on the application...
Слабый алгоритм шифрования в Crypt-PW (weak encryption)
Шифрованный парль легко декодируется...
PassWD2000 v2.x Weak Encryption Vulnerability
== PassWD2000 v2.x Weak Encryption Vulnerability =============== "Success does not consist in never making mistakes but in never making the same one a second time" --- George Bernard Shaw Vulnerable: PassWD2000 2.0 PassWD2000 2.1 PassWD2000 2.2 PassWD2000 2.3 PassWD2000 2.4 PassWD2000 2.5...
Слабое шифрование в PassWD2000 (Weak encryption)
Используется XOR со 128-битным значением...
CVE-2001-0382
CVE-2001-0382 affects Computer Associates CCC Harvest 5.0 for Windows NT/2000. The vulnerability arises from weak password encryption, allowing a remote attacker to gain privileges within the Harvest application. CVSS v2 base score is 7.5 (HIGH) with network attack vector and no authentication. T...
CVE-2001-0382
Computer Associates CCC\Harvest 5.0 for Windows NT/2000 uses weak encryption for passwords, which allows a remote attacker to gain privileges on the application...
Re: Winamp 2.6x / 2.7x buffer overflow
Winamp 2.74 doesnt seem to be affected by the bug although I thought it would be, only 2.60 - 2.73 are affected, the AIP file format is some format invented by AudioSoft to provide a legal way to get MP3's from the net. AIP files or AudioSoft parameter files seem to contain weakly encrypted...
Слабое шифрование в CCC Harvest (weak encryption)
Используется алгоритм подстановки цезаря...
ccc_harvest.txt
-= Zero Tolerance Technologies T Security Advisory =- Reference: ZTT-SA01-27032001 Author: Richard Scott, [email protected] Product: Computer Associates' CCC\Harvest Source Code control software http://ca.com/products/cccharvest.htm http://ca.com/products/descriptions/cccharvest.pdf...
CVE-1999-0757
CVE-1999-0757 concerns the ColdFusion CFCRYPT program used for encrypting CFML templates. Multiple sources (NVD, Red Hat and CVE records) describe the issue as weak encryption that allows an attacker to decrypt the encrypted templates. The affected component is CFCRYPT, and the underlying impact ...
CVE-2001-0103
CoffeeCup Direct and Free FTP clients uses weak encryption to store passwords in the FTPServers.ini file, which could allow attackers to easily decrypt the passwords...
CVE-2001-0103
CoffeeCup Direct and Free FTP clients uses weak encryption to store passwords in the FTPServers.ini file, which could allow attackers to easily decrypt the passwords...
CVE-2001-0103
The CVE-2001-0103 entry concerns CoffeeCup Direct and Free FTP clients that store passwords in FTPServers.ini using weak encryption. The root cause is weak password storage, enabling an attacker with local access to decrypt stored credentials (as described in the NVD entry). The connected documen...
SSH 1.2.x - Secure-RPC Weak Encrypted Authentication
SSH 1.2.x - Secure-RPC Weak Encrypted Authentication // source: https://www.securityfocus.com/bid/2222/info SSH is a package designed to encrypt traffic between two end points using the IETF specified SSH protocol. The SSH1 package is distributed and maintained by SSH Communications Security. A...
CVE-2000-1173
Microsys CyberPatrol uses weak encryption trivial encoding for credit card numbers and uses no encryption for the remainder of the information during registration, which could allow attackers to sniff network traffic and obtain this sensitive information...
CVE-2000-0955
Cisco Virtual Central Office 4000 VCO/4K uses weak encryption to store usernames and passwords in the SNMP MIB, which allows an attacker who knows the community name to crack the password and gain privileges...
CVE-2000-1173
Microsys CyberPatrol uses weak encryption trivial encoding for credit card numbers and uses no encryption for the remainder of the information during registration, which could allow attackers to sniff network traffic and obtain this sensitive information...
CVE-2000-1173
CVE-2000-1173 affects Microsys CyberPatrol. The vulnerability stems from weak encryption (trivial encoding) for credit card numbers and no encryption for other registration data, enabling network sniffing to obtain sensitive information. Public details in the provided documents indicate partial c...
CVE-2000-0955
Cisco Virtual Central Office 4000 VCO/4K uses weak encryption to store usernames and passwords in the SNMP MIB, which allows an attacker who knows the community name to crack the password and gain privileges...