CVE-2008-6157

SepCity Classified Ads stores the admin password in cleartext in data/classifieds.mdb, which allows context-dependent attackers to obtain sensitive information...

CVE-2008-6157

SepCity Classified Ads stores the admin password in cleartext in data/classifieds.mdb, enabling context-dependent attackers to obtain sensitive information. The issue is documented across several sources (NVD, CVE records, PT-2009-1632) with no concrete vendor/version details provided and no expl...

PT-2009-1632 · Sepcity · Sepcity Classified Ads

Name of the Vulnerable Software and Affected Versions: SepCity Classified Ads affected versions not specified Description: The issue allows context-dependent attackers to obtain sensitive information because the admin password is stored in cleartext in the data/classifieds.mdb file...

Fedora Update for krb5 FEDORA-2008-2637

Check for the Version of krb5 OpenVAS Vulnerability Test Fedora Update for krb5 FEDORA-2008-2637 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Fedora Update for krb5 FEDORA-2008-2647

Check for the Version of krb5 OpenVAS Vulnerability Test Fedora Update for krb5 FEDORA-2008-2647 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

System: plain text passwords stored in debug log

Red Hat Certificate System 7.2 stores passwords in cleartext in the UserDirEnrollment log, the RA wizard installer log, and unspecified other debug log files, and uses weak permissions for these files, which allows local users to discover passwords by reading the files...

CVE-2008-2368

Red Hat Certificate System 7.2 stores passwords in cleartext in the UserDirEnrollment log, the RA wizard installer log, and unspecified other debug log files, and uses weak permissions for these files, which allows local users to discover passwords by reading the files...

CVE-2008-2368

Red Hat Certificate System 7.2 stores passwords in cleartext in debug/log files (e.g., UserDirEnrollment log and RA wizard installer log) and uses weak file permissions, enabling local read access. The issue is fixed in Red Hat advisories RHSA-2009:0006/0007 by updating pkisetup, rhpki-* and rela...

Leak of SNMP write password via SNMP read community in NETGEAR WG102 - Prosafe 802.11g Access Point

Dear all, after informing Netgear about the unsafe handling of passwords on their WG102 Access Points nothing happened for several weeks. To inform other users about the potential threat to their networks I decided to share my findings. WG102 offers the the typical SNMP write & SNMP read communit...

NETGEAR WG102 - Leaks SNMP Write Password With Read Access

NETGEAR WG102 - Leaks SNMP Write Password With Read Access Dear all, after informing Netgear about the unsafe handling of passwords on their WG102 Access Points nothing happened for several weeks. To inform other users about the potential threat to their networks I decided to share my findings...

CVE-2008-5847

Constructr CMS 3.02.5 and earlier stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain sensitive information by reading the hash column...

CVE-2008-5847

Constructr CMS 3.02.5 and earlier stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain sensitive information by reading the hash column...

CVE-2008-4390

The Cisco Linksys WVC54GC wireless video camera before firmware 1.25 sends cleartext configuration data in response to a Setup Wizard remote-management command, which allows remote attackers to obtain sensitive information such as passwords by sniffing the network...

CVE-2008-4390

The CVE-2008-4390 entry affects Cisco Linksys WVC54GC/GCAs (wireless video cameras) prior to firmware 1.25. The issue is that, in response to a Setup Wizard remote-management command, the device sends cleartext configuration data over the network, enabling remote attackers to obtain sensitive det...

PT-2008-5636 · Cisco · Cisco Linksys Wvc54Gc

Name of the Vulnerable Software and Affected Versions: Cisco Linksys WVC54GC wireless video camera versions prior to firmware 1.25 Description: The issue allows remote attackers to obtain sensitive information, such as passwords, by sniffing the network. This is because the device sends cleartext...

CVE-2008-5328

The ClearQuest Maintenance Tool in IBM Rational ClearQuest before 7 stores the database password in cleartext in an object in a ClearQuest connection profile or export file, which allows remote authenticated users to obtain sensitive information by locating the password object within the object...

CVE-2008-5327

The ClearQuest Maintenance Tool in IBM Rational ClearQuest 7 before 7.1 stores the database password in cleartext in an object in a ClearQuest connection profile or export file, which allows remote authenticated users to obtain sensitive information by locating the password object within the obje...

Design/Logic Flaw

The ClearQuest Maintenance Tool in IBM Rational ClearQuest before 7 stores the database password in cleartext in an object in a ClearQuest connection profile or export file, which allows remote authenticated users to obtain sensitive information by locating the password object within the object...

CVE-2008-5327

The CVE-2008-5327 entry concerns the IBM Rational ClearQuest Maintenance Tool (ClearQuest 7 before 7.1). The vulnerability arises because the maintenance tool stores the database password in cleartext within an object in a ClearQuest connection profile or export file, enabling remote authenticate...

CVE-2008-5328

The ClearQuest Maintenance Tool in IBM Rational ClearQuest before 7 stores the database password in cleartext in an object in a ClearQuest connection profile or export file, which allows remote authenticated users to obtain sensitive information by locating the password object within the object...