[Full-Disclosure] (AUSCERT AA-2004.02) AUSCERT Advisory - Denial of Service Vulnerability in IEEE 802.11 Wireless Devices (fwd)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 =========================================================================== AA-2004.02 AUSCERT Advisory Denial of Service Vulnerability in IEEE 802.11 Wireless Devices 13 May 2004 Last Revised: -- -...

IEEE 802.11 wireless network protocol DSSS CCA algorithm vulnerable to denial of service

Overview The IEEE 802.11 wireless networking protocol contains a vulnerability that could allow a remote attacker to cause a denial of service to any wireless device within range. Description IEEE 802.11 wireless network protocols use a Clear Channel Assessment CCA algorithm to determine whether ...

BEA WebLogic Server configuration wizard stores administrative credentials in clear text log files

Overview There is a vulnerability in BEA WebLogic Server in which a user with access to log files generated by the configuration wizard could obtain the administrative username and password. Description BEA Systems describes WebLogic Server as "an industrial-strength application infrastructure fo...

BEA WebLogic Server stores administrator password in clear text in config.xml

Overview BEA WebLogic Server stores the administrator password used to boot the server in clear text within the config.xml file. Description BEA Systems describes WebLogic Server as "an industrial-strength application infrastructure for developing, integrating, securing, and managing distributed...

easyfile.txt

Advisory for Easy File Sharing web server 1.2... --- ------------------------------------------------------------------ Easy File Sharing Web Server 1.2 ------------------------------------------------------------------ -= by Drinsane [email protected] =- Product: -------- Easy File Sharing...

Novell GroupWise Internet Agent 6.5.1

Novacoast Security Advisory Novell GroupWise 6.5 Vulnerability Synopsis: Novacoast has discovered a vulnerability in the Novell GroupWise 6.5 Wireless Webaccess logging functionality. The software exposes all username and passwords within the log file in clear text. This information could be used...

Mailtraq 2.1.0.1302 - User Password Encoding

Mailtraq 2.1.0.1302 - User Password Encoding source: https://www.securityfocus.com/bid/7923/info It has been reported that Mailtraq does not securely store passwords. Because of this, an attacker may have an increased chance at gaining access to clear text passwords. !/usr/bin/perl $Password =...

Mailtraq 2.1.0.1302 - User Password Encoding

source: https://www.securityfocus.com/bid/7923/info It has been reported that Mailtraq does not securely store passwords. Because of this, an attacker may have an increased chance at gaining access to clear text passwords. !/usr/bin/perl $Password = $ARGV0; print "Passwords should be something...

IRCXpro 1.0 - Clear local and default remote admin passwords

------------------------------------------------------------------ - EXPL-A-2003-002 exploitlabs.com Advisory 002 ------------------------------------------------------------------ -=- IRCXpro 1.0 -=- Vunerabilitys: ---------------- 1.local clear passwords 2.remote default admin enabled Product:...

Mac OS X LDAP plugins transmit user credentials in clear text

Overview Versions 10.2 and later of Apple's MacOS X operating system include support for the Lightweight Directory Access Protocol LDAP. A vulnerability in the way some of these versions of MacOS X handle authentication in certain environments could expose user's passwords in plaintext as they're...

BEA WebLogic Server and Express 7.x Passwords Disclosure

------------------------------------------------------------ BEA WebLogic Server and Express 7.x Passwords Disclosure ------------------------------------------------------------ Affected Versions ----------------- BEA WebLogic Server 7.x BEA WebLogic Express 7.x ADVISORY -------- This...

MySimpleNews 1.0 - Remote Readable Administrator Password

MySimpleNews 1.0 - Remote Readable Administrator Password source: https://www.securityfocus.com/bid/5866/info MySimpleNews stores the administrative password in clear text in a remotely viewable HTML file. Any remote user can view the contents of the HTML file to determine the administrator...

MySimpleNews 1.0 - Remote Readable Administrator Password

source: https://www.securityfocus.com/bid/5866/info MySimpleNews stores the administrative password in clear text in a remotely viewable HTML file. Any remote user can view the contents of the HTML file to determine the administrator password. The administrator password can be found in the HTML...

Shana Informed 3.05 information disclosure

Shana Informed v3.05 stores random data in clear text http://www.cirt.net/advisories/shana.shtml Product Description: Shana Corporation provides eForm solutions and is the developer of Informed. Their solution is used by more than two million people around the world. Shana's Informed has been...

Security Advisory: Cisco VPN 5000 Series Concentrator RADIUS PAP Authentication Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco VPN 5000 Series Concentrator RADIUS PAP Authentication Vulnerability Revision 1.0 For Public Release 2002 August 07 UTC 1500 Contents Summary Affected Products Details Impact Software Versions and Fixes Obtaining Fixed...

KPMG-2002018: Pointsec for PalmOS PIN disclosure

-------------------------------------------------------------------- Title: Pointsec for PalmOS PIN disclosure BUG-ID: 2002018 Released: 03rd May 2002 Discovered by: Laurens Binken, KPMG IRM, the Netherlands -------------------------------------------------------------------- Problem: ========...

CVE-2002-0344

CVE-2002-0344 affects Symantec LiveUpdate 1.5 and earlier used with Norton Antivirus. The issue stems from storing usernames and passwords for a local LiveUpdate server in cleartext in the registry, which may allow remote attackers to impersonate the LiveUpdate server. The NVD entry describes thi...

PGP 7.x with Outlook will give your passphrase in CLEAR

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 0 10 20 30 40 50 60 70 80 90 100 |----|----|----|----|----|----|----|----|----|----| ................................................... .---------------. / NtWaK0 Bugs +-----------------------------------------------------------------------. : Affect...

Xpede passwords exposed (2 vuln.)

Passwords exposed in Intellisol XPede ========================== About Xpede ========= quote from http://www.workforceroi.com/solutions/pa/index.shtml "Intellisol Xpede is a browser-based time and expense entry and project cost management module designed to connect a remote workforce on a real-...

Xitami Webserver stores admin password in clear text.

I am releasing this a bit early as the vendor has been aware of this issue for a while now. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Vapid Labs Larry W. Cashdollar Xitami Webserver clear text password storage vulnerability. Date Published: 11/23/2001 Advisory ID: 11232001-02 Title: Xitami...