Symantec pcAnywhere 9.0 - Weak Encryption

Symantec pcAnywhere 9.0 - Weak Encryption // source: https://www.securityfocus.com/bid/1093/info Symantec pcAnywhere is shipped by default with a weak encryption scheme that is used to encrypt username and password transmittal. Therefore, usernames and password can be retrieved by anyone sniffing...

CVE-2000-0244

The Citrix ICA Independent Computing Architecture protocol uses weak encryption XOR for user authentication...

Citrix Metaframe 1.0/1.8 - Weak Encryption

// source: https://www.securityfocus.com/bid/1077/info The ICA protocol uses a simple XOR-based encryption algorthm to protect user credentials while stored or in transit. This encryption can be easily broken, meaning that anyone sniffing the connection can obtain user access to the server. The I...

Citrix Metaframe 1.01.8 - Weak Encryption

Citrix Metaframe 1.01.8 - Weak Encryption // source: https://www.securityfocus.com/bid/1077/info The ICA protocol uses a simple XOR-based encryption algorthm to protect user credentials while stored or in transit. This encryption can be easily broken, meaning that anyone sniffing the connection c...

CVE-2000-0214

CVE-2000-0214 : The incident is tied to FTP Explorer, which stores usernames, passwords, and FTP site profiles using weak encryption. The available data describe the vulnerability as a local issue with partial confidentiality and integrity impact, and a base severity of MEDIUM (score 4.6). No exp...

CVE-2000-0214

FTP Explorer uses weak encryption for storing the username, password, and profile of FTP sites...

CVE-2000-0199

CVE-2000-0199 affects Microsoft SQL Server 7.0 via Enterprise Manager when the “Always prompt for login name and password” option is not set; the login credentials are stored with weak encryption. The connected Nessus entry also describes a potential local privilege escalation by authenticated us...

CVE-2000-0199

When a new SQL Server is registered in Enterprise Manager for Microsoft SQL Server 7.0 and the "Always prompt for login name and password" option is not set, then the Enterprise Manager uses weak encryption to store the login ID and password...

CVE-2000-0199

When a new SQL Server is registered in Enterprise Manager for Microsoft SQL Server 7.0 and the "Always prompt for login name and password" option is not set, then the Enterprise Manager uses weak encryption to store the login ID and password...

CVE-2000-0214

FTP Explorer uses weak encryption for storing the username, password, and profile of FTP sites...

CVE-2000-0019

CVE-2000-0019 affects the IMail POP3 daemon. The vulnerability arises from weak encryption, enabling local users to read files with partial confidentiality impact. The provided sources indicate affected versions are not specified and there is no information about a fix in the documents supplied.

CVE-1999-0476

A weak encryption algorithm is used for passwords in SCO TermVision, allowing them to be easily decrypted by a local user...

CVE-1999-0356

ControlIT v4.5 and earlier uses weak encryption to store usernames and passwords in an address book...

CVE-1999-0476

The CVE-1999-0476 entry concerns SCO TermVision which uses a weak password encryption algorithm. The root cause is weak encryption that allows a local user to easily decrypt passwords stored by TermVision. Impact is limited to confidentiality and integrity of password data, as described in the so...

CVE-1999-0829

The CVE-1999-0829 entry concerns HP Secure Web Console using weak encryption. Connected sources reinforce that the vulnerable software is HP Secure Web Console, with the underlying issue being weak encryption (no specific affected versions or fixes are provided). Practical impact is described as ...

CVE-1999-0356

Summary of CVE-1999-0356 (ControlIT) : Affects ControlIT versions prior to 4.5. The issue is the use of weak encryption to store usernames and passwords in an address book, exposing confidentiality and integrity. Root cause: insecure storage of credentials due to weak encryption. No explicit expl...

CVE-1999-0944

The CVE stems from IBM WebSphere ikeyman tool storing a password for the SSL key database with weak encryption. Affected component: IBM WebSphere ikeyman tool. Root cause: use of weak encryption for password storage in the key database used for SSL connections, leading to potential disclosure or ...

CVE-1999-0944

IBM WebSphere ikeyman tool uses weak encryption to store a password for a key database that is used for SSL connections...

CVE-2000-0019

IMail POP3 daemon uses weak encryption, which allows local users to read files...

CVE-2000-0084

Summary of CVE-2000-0084 (CuteFTP) : The vulnerability arises from CuteFTP storing password information in its tree.dat file using weak encryption. This is evidenced across multiple sources in the connected documents, which consistently describe weak encryption as the root cause. The available de...