Слабое шифрование пароля в PC Anywhere

По-умолчанию используется шифрование паролей тривиальным методом, пароль может быть перехвачен и полностью восстановлен. Перехваченный пароль является паролем учетной записи Windows NT...

FTPx FTP Explorer 1.0.00.10 - Weak Password Encryption

FTPx FTP Explorer 1.0.00.10 - Weak Password Encryption // source: https://www.securityfocus.com/bid/1003/info FTP Explorer includes the option to store profiles of visited FTP sites. The user's name and password can also be stored. These stored values are kept in the registry, under the key...

Ipswitch IMail Server 5.0/5.0.5/5.0.6/5.0.7/5.0.8/6.0 - Weak Password Encryption

// source: https://www.securityfocus.com/bid/880/info IMail keeps the encrypted passwords for email accounts in a registry key, HKLM\SOFTWARE\Ipswitch\Imail\Domains\DomainName\Users\UserName, in a string value called "Password". The encryption scheme used is weak and has been broken. The followin...

Ipswitch IMail Server 5.05.0.55.0.65.0.75.0.86.0 - Weak Password Encryption

Ipswitch IMail Server 5.05.0.55.0.65.0.75.0.86.0 - Weak Password Encryption // source: https://www.securityfocus.com/bid/880/info IMail keeps the encrypted passwords for email accounts in a registry key, HKLM\SOFTWARE\Ipswitch\Imail\Domains\DomainName\Users\UserName, in a string value called...

IBM Websphere 2.03.0 - ikeyman Weak Encrypted Password

IBM Websphere 2.03.0 - ikeyman Weak Encrypted Password source: https://www.securityfocus.com/bid/1763/info IBM WebSphere ships with a tool called 'ikeyman' that encrypts server certificates/key pairs when the IBM HTTP Server and SSL connections are enabled. Ikeyman stores the password in a stash...

Quinn - the Eskimo and Peter N. Lewis Internet Configuration 1.02.0 Weak Password Encryption

Quinn - the Eskimo and Peter N. Lewis Internet Configuration 1.02.0 Weak Password Encryption source: https://www.securityfocus.com/bid/546/info Internet Config is a third-party freeware utility for MacOS. It provides a means of centralizing frequently-required connection information, including...

Apple Mac OS 8 8.6 - Weak Password Encryption

source: https://www.securityfocus.com/bid/519/info The encryption algorithm in MacOS system is simple and the password can be easily decoded. Password is stored in Users & Groups Data File in Preferences folder. Offset is different on each system and depends on Users & Groups configuration, but i...

Apple Mac OS 8 8.6 - Weak Password Encryption

Apple Mac OS 8 8.6 - Weak Password Encryption source: https://www.securityfocus.com/bid/519/info The encryption algorithm in MacOS system is simple and the password can be easily decoded. Password is stored in Users & Groups Data File in Preferences folder. Offset is different on each system and...

PT-1999-1157 · Sco · Sco Termvision

Name of the Vulnerable Software and Affected Versions: SCO TermVision affected versions not specified Description: A weak encryption algorithm is used for passwords, allowing them to be easily decrypted by a local user. Recommendations: At the moment, there is no information about a newer version...

PT-1999-1041 · Controlit · Controlit

Name of the Vulnerable Software and Affected Versions: ControlIT versions 4.5 and earlier Description: The issue is related to weak password encryption. Recommendations: For ControlIT versions 4.5 and earlier, update to a version with improved password encryption to resolve the issue...

SSH - User Code Execution (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'net/ssh' class MetasploitModule 'SSH User Code Execution', 'Description' = %q This module connects to the target system and executes the...