Cart32 admin password vulnerability

Joint advisory issued by Cart32 and Colin Hart --------------------------------------- Date Published: 6th November 2000 --------------------------------------- Title: Cart32 admin password vulnerability --------------------------------------- Vulnerable Packages/Systems: Cart32 v3.5 build 619, i...

CVE-2000-0789

WinU 5.x and earlier uses weak encryption to store its configuration password, which allows local users to decrypt the password and gain privileges...

Palm OS 3.5.2 - Weak Encryption

Palm OS 3.5.2 - Weak Encryption source: https://www.securityfocus.com/bid/1715/info Palm OS is shipped with a security feature which enables a user to set password protection on various applications.The HotSync process allows a user to connect to a machine on the network through their Palm device...

Palm OS 3.5.2 - Weak Encryption

source: https://www.securityfocus.com/bid/1715/info Palm OS is shipped with a security feature which enables a user to set password protection on various applications.The HotSync process allows a user to connect to a machine on the network through their Palm device. This process involves the devi...

CVE-2000-0789

WinU 5.x and earlier uses weak encryption to store its configuration password, which allows local users to decrypt the password and gain privileges...

CVE-2000-0789

The CVE-2000-0789 entry targets WinU 5.x and earlier. The vulnerability arises because the product stores its configuration password with weak encryption, enabling local users to decrypt the password and gain privileges. This is based on the NVD/CVE descriptions indicating weak encryption used fo...

CVE-2000-0789: Undefined Security Weakness

WinU 5.x and earlier uses weak encryption to store its configuration password, which allows local users to decrypt the password and gain privileges...

CVE-2000-0625

CVE-2000-0625 refers to NetZero 3.0 and earlier, which stores login credentials using weak encryption. The underlying issue is insecure storage that allows a local user to decrypt the password. No remediation details are provided in the sources; the impact is partial confidentiality and integrity...

CVE-2000-0625

NetZero 3.0 and earlier uses weak encryption for storing a user's login information, which allows a local user to decrypt the password...

CVE-2000-0625: Undefined Security Weakness

NetZero 3.0 and earlier uses weak encryption for storing a user's login information, which allows a local user to decrypt the password...

CVE-2000-0572

The Razor configuration management tool uses weak encryption for its password file, which allows local users to gain privileges...

CVE-2000-0572

CVE-2000-0572 affects the Razor configuration management tool. The root cause is weak encryption of the password file, enabling local users to gain privileges. CVSS v2 base score 4.6 (Medium); attack vector LOCAL, attack complexity LOW, authentication NONE, with partial impact to confidentiality,...

CVE-2000-0589

SawMill 5.0.21 is affected by a weakness in how it stores passwords, enabling an attacker to decrypt the administrative password and modify the SawMill configuration. The vulnerability stems from weak encryption/hash usage, facilitating information disclosure and potential configuration tampering...

CVE-2000-0589

SawMill 5.0.21 uses weak encryption to store passwords, which allows attackers to easily decrypt the password and modify the SawMill configuration...

CVE-2000-0589: Undefined Security Weakness

SawMill 5.0.21 uses weak encryption to store passwords, which allows attackers to easily decrypt the password and modify the SawMill configuration...

CVE-2000-0572: Undefined Security Weakness

The Razor configuration management tool uses weak encryption for its password file, which allows local users to gain privileges...

CVE-2000-0625

NetZero 3.0 and earlier uses weak encryption for storing a user's login information, which allows a local user to decrypt the password...

NetZero ZeroPort 3.0 - Weak Encryption Method

NetZero ZeroPort 3.0 - Weak Encryption Method // source: https://www.securityfocus.com/bid/1483/info Netzero is a free internet service provider which requires its users to run the application ZeroPort in order to log onto the network. The username and password is stored locally in a text file...

NetZero ZeroPort 3.0 - Weak Encryption Method

// source: https://www.securityfocus.com/bid/1483/info Netzero is a free internet service provider which requires its users to run the application ZeroPort in order to log onto the network. The username and password is stored locally in a text file called id.dat and is inadequately encrypted. The...

CVE-2000-0559

The CVE-2000-0559 entry describes a vulnerability in eTrust Intrusion Detection System (formerly SessionWall-3) where administrative passwords stored in the registry are protected with weak XOR encryption. The underlying issue is the weak encryption implementation, enabling a local attacker to de...