CVE-1999-1271

CVE-1999-1271 concerns Macromedia Dreamweaver, where credentials for FTP are stored with weak encryption. The root cause is weak encryption that enables local users to decrypt other users’ FTP passwords. The entry provides a high-level impact on confidentiality (partial) but does not specify affe...

CVE-1999-1497

Ipswitch IMail 5.0 and 6.0 store e‑mail account passwords in registry keys using weak encryption, allowing local attackers to read passwords. Affected component: registry storage of credentials; Root cause: weak cryptography. Impact: local confidentiality and integrity compromise. CVSS base score...

CVE-1999-1078

The CVE applies to Ipswitch WS_FTP Pro (6.0) where passwords are stored with weak encryption in initialization files. This enables a remote attacker to decrypt stored passwords and potentially gain privileges. OpenVAS and Nessus entries corroborate weak stored password issues in WS_FTP Pro/Client...

CVE-1999-1049

ARCserve NT agents use weak encryption XOR for passwords, which allows remote attackers to sniff the authentication request to port 6050 and decrypt the password...

CVE-1999-1366

Pegasus e-mail client 3.0 and earlier uses weak encryption to store POP3 passwords in the pmail.ini file, which allows local users to easily decrypt the passwords and read e-mail...

CVE-1999-1271

Macromedia Dreamweaver uses weak encryption to store FTP passwords, which could allow local users to easily decrypt the passwords of other users...

CVE-1999-1497

Ipswitch IMail 5.0 and 6.0 uses weak encryption to store passwords in registry keys, which allows local attackers to read passwords for e-mail accounts...

CVE-1999-1366

CVE-1999-1366 affects Pegasus Mail client (Pegasus e-mail client) 3.0 and earlier. The vulnerability arises from storing POP3 passwords in pmail.ini with weak encryption, allowing local users to decrypt passwords and read e-mail. The provided documents do not include an official fix or remediatio...

CVE-1999-1049

ARCserve NT agents authenticate using a weak XOR scheme for passwords. The vulnerability allows remote attackers to sniff the authentication request sent to port 6050 and decrypt the password, leading to potential unauthorized access and confidentiality/ integrity impact as described in the CVE e...

CVE-1999-1540

CVE-1999-1540 affects Cactus Software Shell Lock, where weak encryption (trivial encoding) enables local attackers to decrypt and obtain the source code. According to NVD, the baseline impact is Partial confidentiality with no integrity or availability impact, and the exploit is local with low ov...

CVE-1999-1101: Undefined Security Weakness

Kabsoftware Lydia utility uses weak encryption to store user passwords in the lydia.ini file, which allows local users to easily decrypt the passwords and gain privileges...

CVE-1999-1271: Undefined Security Weakness

Macromedia Dreamweaver uses weak encryption to store FTP passwords, which could allow local users to easily decrypt the passwords of other users...

CVE-1999-1540: Undefined Security Weakness

shell-lock in Cactus Software Shell Lock uses weak encryption trivial encoding which allows attackers to easily decrypt and obtain the source code...

CVE-1999-1366: Undefined Security Weakness

Pegasus e-mail client 3.0 and earlier uses weak encryption to store POP3 passwords in the pmail.ini file, which allows local users to easily decrypt the passwords and read e-mail...

CVE-1999-1497: Undefined Security Weakness

Ipswitch IMail 5.0 and 6.0 uses weak encryption to store passwords in registry keys, which allows local attackers to read passwords for e-mail accounts...

CVE-1999-1078: Undefined Security Weakness

WSFTP Pro 6.0 uses weak encryption for passwords in its initialization files, which allows remote attackers to easily decrypt the passwords and gain privileges...

CVE-1999-1543: Undefined Security Weakness

MacOS uses weak encryption for passwords that are stored in the Users & Groups Data File...

CVE-1999-1049: Undefined Security Weakness

ARCserve NT agents use weak encryption XOR for passwords, which allows remote attackers to sniff the authentication request to port 6050 and decrypt the password...

CVE-2001-0983

UltraEdit uses weak encryption to record FTP passwords in the uedit32.ini file, which allows local users who can read the file to decrypt the passwords and gain privileges...

CVE-2001-1003

Respondus 1.1.2 for WebCT uses weak encryption to remember usernames and passwords, which allows local users who can read the WEBCT.SVR file to decrypt the passwords and gain additional privileges...