32 matches found
Schneider Electric Modicon M580 FTP cleartext authentication vulnerability
Summary An exploitable information disclosure vulnerability exists in the FTP functionality of the Schneider Electric Modicon M580 Programmable Automation Controller, firmware version SV2.80. An attacker can sniff network traffic to exploit this vulnerability. Tested Versions Schneider Electric...
CVE-2018-17176
A replay issue was discovered on Neato Botvac Connected 2.2.0 devices. Manual control mode requires authentication, but once recorded, the authentication always transmitted in cleartext can be replayed to /bin/webserver on port 8081. There are no nonces, and timestamps are not checked at all...
AMQP Cleartext Authentication
The remote Advanced Message Queuing Protocol AMQP service supports one or more authentication mechanisms that allow credentials to be sent in the clear. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid87733; scriptversion"$Revision: 1.1 $"; scriptcvsdate"$Date:...
XMPP Cleartext Authentication
The remote Extensible Messaging and Presence Protocol XMPP service supports one or more authentication mechanisms that allow credentials to be sent in the clear. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid87736; scriptversion"$Revision: 1.1 $"; scriptcvsdate"$Date...
Network UPS Tools Cleartext Authentication
The remote Network UPS Tools does not support exchanging credentials through an encrypted channel. An unauthenticated, remote attacker can exploit this to perform a man-in-the-middle attack, intercept credentials, and alter the settings on the UPS that the server manages. C Tenable Network...
samba and cifs-utils security and bug fix update
cifs-utils: 4.8.1-2.2 - fix handling of checknewline return code in mount.cifs bz 725508 4.8.1-2.1 - mount.cifs: handle ENOSPC/EFBIG condition when altering mtab bz 725508 samba: 3.5.6-86.4 - Fix cleartext authentication after applying Windows security patch KB2536276 - resolves: 728517 3.5.6-86....
FTP Supports Cleartext Authentication
The remote FTP server allows the user's name and password to be transmitted in cleartext, which could be intercepted by a network sniffer or a man-in-the-middle attack. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid34324; scriptversion"1.28";...
CVE-2001-1517
RunAs runas.exe in Windows 2000 stores cleartext authentication information in memory, which could allow attackers to obtain usernames and passwords by executing a process that is allocated the same memory page after termination of a RunAs command. NOTE: the vendor disputes this issue, saying tha...
SQL Server Cleartext 'probe' Account 'probe' Password Authentication (deprecated)
Binary data 1128.prm...
SQL Server Cleartext 'admin' Account 'admin' Password Attempted Login (deprecated)
Binary data 1115.prm...
