Stock portfolio sent via clear text in Datek Streamer® application

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 S4R - A Managed Services Company Security - Systems - Storage - Solutions http://www.s4r.com [email protected] Title: Stock portfolio sent via clear text in Datek Streamer® application Date: November 9, 2001 1. Description Although the user's primary Datek...

Пароли в открытом тексте в ARCServe for NT (readable cleartext passwords)

На разделяемом диске находится файл с паролем в открытом виде...

CVE-1999-1446

Internet Explorer 3 records a history of all URL's that are visited by a user in DAT files located in the Temporary Internet Files and History folders, which are not cleared when the user selects the "Clear History" option, and are not visible when the user browses the folders because of tailored...

CVE-1999-1446

Technical details for CVE-1999-1446 are not publicly available in the provided documents. Monitor for updates.

CVE-2001-0619

The Lucent Closed Network protocol can allow remote attackers to join Closed Network networks which they do not have access to. The 'Network Name' or SSID, which is used as a shared secret to join the network, is transmitted in the clear...

pgp4pine fails to properly check for expired public keys

Overview The program pgp4pine version 1.75.6 fails to properly identify expired keys when working with the Gnu Privacy Guard program GnuPG. This failure may result in the clear-text transmission of senstive information when used with the PINE mail reading package. Description The program pgp4pine...

Apple Mac OSX 10 - nidump Password File Disclosure

Apple Mac OSX 10 - nidump Password File Disclosure source: https://www.securityfocus.com/bid/2953/info A vulnerability exists in all versions of Apple MacOS X. It has been found to contain a vulnerability which could allow disclosure of passwords and other sensitive system information. nidump is ...

Cisco HSRP Weakness/DoS

Hi I was playing with Cisco's HSRP Hot Standby Routing Protocol, and there is a major weakness in that protocol that allow any host in a LAN segment to make a HSRP DoS. Short very explain of HSRP. HSRP uses UDP on port 1985 to multicast address 224.0.0.2, and the authentication is in clear text...

Password stored in clear text vulnerability in real time stock trading program

Company: REDIProducts, a division of Spear, Leeds and Kellogg Program: REDI.exe Background: REDI is a real time stock trading software used by active traders to execute stock orders very rapidly. From their web site www.redi.com bullet points of REDI include; "Optimal execution, immediate access ...

CVE-2000-0873: Undefined Security Weakness

netstat in AIX 4.x.x does not properly restrict access to the -Zi option, which allows local users to clear network interface statistics and possibly hide evidence of unusual network activities...

ICMP fragmentation required but DF set problems.

Hi all, The problem I'm exposing is quite obvious, but unfortunatelly can be used in a very simple way by script kiddies. SYNOPSIS It's possible to slowdown a lot connections between two arbirary hosts but at least one with the PMTU discovery enabled using some spoofed TCP/IP packet. Maybe you ca...

[CORE SDI ADVISORY] iPlanet Certificate Management System 4.2 path traversal bug

CORE SDI http://www.core-sdi.com Vulnerability Report For iPlanet CMS and Netscape Directory Server Date Published: 2000-10-26 Advisory ID: CORE-2000-10-26 Bugtraq ID: 1839 CVE CAN: Non currently assigned. Title: Path traversal and administrator password in clear text vulnerabilities Class: Acces...

Two issues: Blackboard CourseInfo 4.0 stores admin password in clear text; strange settings on the winreg key.

Hi, Russ. This is a big mess; I've got two different things for your consideration. Perhaps you can help me out. First of all, Blackboard CourseInfo 4.0 stores a local administrator username and password in clear text in the registry. Unless an administrator has hardened their registry against...

NetStructure 7180 remote backdoor vulnerability

@Stake Inc. L0pht Research Labs www.atstake.com www.L0pht.com Security Advisory Advisory Name: NetStructure 7180 remote backdoor vulnerability Release Date: May 8th, 2000 Application: Intel NetStructure 7180 previously the Ipivot Commerce Accelerator 8000 Severity: Compromise from a remote networ...

IKE - Aggressive Mode Shared Secret Hash Leakage

source: https://www.securityfocus.com/bid/7423/info When a VPN is configured to use a pre-shared master secret and a client attempts to negotiate keys in aggressive mode, a hash of the secret is transmitted across the network in clear-text. This may result in the hash being leaked to eavesdropper...

norton.antivirus.passwd.txt

Date: Fri, 9 Apr 1999 16:12:26 -0700 From: "Saling, Kevin" To: [email protected] Subject: NAV for MS Exchange & Internet Email Gateways After installing the following Symantec products: Norton AntiVirus for Internet Email Gateways 1.0.1.7 NAVIEG Norton AntiVirus for MS Exchange 1.5...

sims-sds.txt

Date: Fri, 25 Dec 1998 19:51:56 PST From: Dana Jones Reply-To: Bugtraq List To: [email protected] Subject: Vulnerability SIMS 3.x Sun Internet Mail Server and SDS 1.x & 3.1 Sun LDAP Directory services vulnerability. /var/opt/SUNWconn/ldap/log/slapd.log is used to log ldap connects/operations. ...

ms.sql.enterprise.manager.txt

Date: Thu, 4 Mar 1999 19:52:15 -0500 From: [email protected] To: [email protected] I've come across an issue regarding Microsoft SQL Server 6.0 and 6.5. SQL Server has a management tool called SQL Explorer used to manage the server. If your SQL Server is set to use normal...

warftpd.170b1.passwd.txt

War FTP Deamon 1.70 beta1 saves passwords in 'clear' text. Article Summary War FTP Deamon 1.70 beta1 stores all the user database, including passwords in 'clear' text. Making it possible for anyone with access to the file to gain knowlage of privileged's people passwords. Article Details War FTP...

NetIQ.txt

AppManager 2.0 from NetIQ displays passwords in clear text! AppManager is a product which enables an enterprise to monitor the performance and availability of Windows NT server services such as Exchange, SQL, etc. It does this via an agent on the target machine which reports back to a console. Th...