Lucene search
+L

2012 matches found

CVE
CVE
•added 2005/12/07 11:00 a.m.•104 views

CVE-2005-4066

The CVE-2005-4066 entry concerns Total Commander 6.53 storing FTP credentials in WCX_FTP.INI with weak encryption, enabling local users to decrypt passwords and access FTP servers. The vulnerability description and references consistently indicate local credential exposure as the impact; specific...

4.9CVSS6.9AI score0.00229EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2005/12/07 11:00 a.m.•32 views

CVE-2005-4066

Total Commander 6.53 uses weak encryption to store FTP usernames and passwords in WCXFTP.INI, which allows local users to decrypt the passwords and gain access to FTP servers, as possibly demonstrated by the W32.Gudeb worm...

6.5AI score0.00229EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/12/07 12:00 a.m.•5 views

CVE-2005-4066: Undefined Security Weakness

Total Commander 6.53 uses weak encryption to store FTP usernames and passwords in WCXFTP.INI, which allows local users to decrypt the passwords and gain access to FTP servers, as possibly demonstrated by the W32.Gudeb worm...

4.9CVSS5.8AI score0.00229EPSS
SaveExploits0References2
NVD
NVD
•added 2005/11/24 11:03 a.m.•13 views

CVE-2005-3800

Macromedia Contribute Publishing Server CPS before 1.11 uses a weak algorithm to encrypt user password in connection keys that use shared FTP login credentials, which allows attackers to obtain sensitive information...

5CVSS6.4AI score0.01309EPSS
SaveExploits0References6
CVE
CVE
•added 2005/11/24 11:00 a.m.•47 views

CVE-2005-3800

The CVE concerns Macromedia Contribute Publishing Server (CPS) prior to version 1.11 that uses a weak algorithm to encrypt user passwords within connection keys that rely on shared FTP login credentials. The underlying issue enables disclosure of sensitive information by an attacker who can acces...

5CVSS6.8AI score0.01309EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2005/11/24 11:00 a.m.•23 views

CVE-2005-3800

Macromedia Contribute Publishing Server CPS before 1.11 uses a weak algorithm to encrypt user password in connection keys that use shared FTP login credentials, which allows attackers to obtain sensitive information...

6.4AI score0.01309EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/11/24 12:00 a.m.•8 views

CVE-2005-3800: Undefined Security Weakness

Macromedia Contribute Publishing Server CPS before 1.11 uses a weak algorithm to encrypt user password in connection keys that use shared FTP login credentials, which allows attackers to obtain sensitive information...

5CVSS5.8AI score0.01309EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2005/11/16 9:17 p.m.•38 views

CVE-2002-2162

Cerulean Studios Trillian 0.73 and earlier use weak encrypttion XOR for storing user passwords in .ini files in the Trillian directory, which allows local users to gain access to other user accounts...

6.5AI score0.00765EPSS
SaveExploits2References3
CVE
CVE
•added 2005/11/16 9:17 p.m.•82 views

CVE-2002-2162

Cerulean Studios Trillian 0.73 and earlier stores passwords in .ini files in the Trillian directory using weak XOR encryption, enabling local users to access other users’ credentials. Affected product/version: Trillian

4.6CVSS6.5AI score0.00765EPSS
SaveExploits2References3Affected Software1
CVE
CVE
•added 2005/11/16 7:37 a.m.•56 views

CVE-2003-1276

Netfone.exe of NetTelephone 3.5.6 is vulnerable due to weak encryption for user PINs and plaintext storage of account numbers in the registry (HKCU\Software\MediaRing.com\SDK\NetTelephone\settings). Local users could potentially gain unauthorized access to NetTelephone accounts. The connected doc...

4.6CVSS7AI score0.00223EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2005/11/16 7:37 a.m.•40 views

CVE-2003-1276

Netfone.exe of NetTelephone 3.5.6 uses weak encryption for user PIN's and stores user account numbers in plaintext in the HKEYCURRENTUSER\Software\MediaRing.com\SDK\NetTelephone\settings registry key, which could allow local users to gain unauthorized access to NetTelephone accounts...

6.6AI score0.00223EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2005/11/16 7:37 a.m.•35 views

CVE-2002-2133

Telindus 1100 ASDL router running firmware 6.0.x uses weak encryption for UDP session traffic, which allows remote attackers to gain unauthorized access by sniffing and decrypting the administrative password...

7.1AI score0.02319EPSS
SaveExploits1References5
CVE
CVE
•added 2005/11/16 7:37 a.m.•68 views

CVE-2002-2133

CVE-2002-2133 describes a vulnerability in Telindus 1100 ADSL router firmware 6.0.x where weak encryption is used for UDP session traffic. This weakness could allow remote attackers to gain unauthorized access by sniffing and decrypting the administrative password. Documents do not provide remedi...

10CVSS7.5AI score0.02319EPSS
SaveExploits1References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/11/16 12:00 a.m.•9 views

CVE-2003-1276: Undefined Security Weakness

Netfone.exe of NetTelephone 3.5.6 uses weak encryption for user PIN's and stores user account numbers in plaintext in the HKEYCURRENTUSER\Software\MediaRing.com\SDK\NetTelephone\settings registry key, which could allow local users to gain unauthorized access to NetTelephone accounts...

4.6CVSS5.8AI score0.00223EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/11/16 12:00 a.m.•8 views

CVE-2002-2162: Undefined Security Weakness

Cerulean Studios Trillian 0.73 and earlier use weak encrypttion XOR for storing user passwords in .ini files in the Trillian directory, which allows local users to gain access to other user accounts...

4.6CVSS5.8AI score0.00765EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/11/16 12:00 a.m.•9 views

CVE-2002-2133: Undefined Security Weakness

Telindus 1100 ASDL router running firmware 6.0.x uses weak encryption for UDP session traffic, which allows remote attackers to gain unauthorized access by sniffing and decrypting the administrative password...

10CVSS5.9AI score0.02319EPSS
SaveExploits1References1
OpenVAS
OpenVAS
•added 2005/11/03 12:00 a.m.•30 views

WS_FTP client weak stored password

The remote host has a version of the WSFTP client which use a weak encryption method to store site password. OpenVAS Vulnerability Test $Id: wsftpclientweakstoredpass.nasl 6040 2017-04-27 09:02:38Z teissa $ Description: WSFTP client weak stored password Authors: David Maciejak based on work from ...

7.5CVSS6.6AI score0.01803EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2005/11/03 12:00 a.m.•37 views

OfficeScan configuration file disclosure

Trend Micro OfficeScan Corporate Edition Japanese version: Virus Buster Corporate Edition web-based management console let anybody access /officescan/hotdownload without authentication. Reading the configuration file /officescan/hotdownload/ofcscan.ini will reveal information on your system. More...

5CVSS0.2AI score0.02414EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2005/11/03 12:00 a.m.•18 views

Citrix Server Detection

A Citrix server is running on this machine. SPDX-FileCopyrightText: 2005 John [email protected] Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.1AI score
SaveExploits0References1
OpenVAS
OpenVAS
•added 2005/11/03 12:00 a.m.•54 views

Ipswitch WS_FTP Professional < 12.6 Weak Stored Password Vulnerability

Ipswitch WSFTP Professional is using a weak encryption method to store site passwords. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

7.5CVSS6.5AI score0.01803EPSS
SaveExploits0References1
Rows per page
Query Builder