PT-2008-4695 · Emc · Emc Dantz Retrospect Backup Client

Name of the Vulnerable Software and Affected Versions: EMC Dantz Retrospect Backup Client version 7.5.116 Description: The issue allows remote attackers to obtain sensitive information via a crafted packet, as the password hash is sent in cleartext. Recommendations: For version 7.5.116, consider...

Bacula: Information disclosure

Background Bacula is a network based backup suite. Description Matthijs Kooijman reported that the "makecatalogbackup" script uses the MySQL password as a command line argument when invoking other programs. Impact A local attacker could list the processes on the local machine when the script is...

Design/Logic Flaw

WeFi 3.2.1.4.1, when diagnostic mode is enabled, stores 1 WEP, 2 WPA, and 3 WPA2 access-point keys in a ClientWeFiLog.dat, b ClientWeFiLog.bak, and possibly c a certain .inf file under %PROGRAMFILES%\WeFi\Users, and uses cleartext for the ClientWeFiLog files, which allows local users to obtain...

CVE-2008-3147

WeFi 3.2.1.4.1, when diagnostic mode is enabled, stores 1 WEP, 2 WPA, and 3 WPA2 access-point keys in a ClientWeFiLog.dat, b ClientWeFiLog.bak, and possibly c a certain .inf file under %PROGRAMFILES%\WeFi\Users, and uses cleartext for the ClientWeFiLog files, which allows local users to obtain...

CVE-2008-3147

WeFi 3.2.1.4.1, when diagnostic mode is enabled, stores 1 WEP, 2 WPA, and 3 WPA2 access-point keys in a ClientWeFiLog.dat, b ClientWeFiLog.bak, and possibly c a certain .inf file under %PROGRAMFILES%\WeFi\Users, and uses cleartext for the ClientWeFiLog files, which allows local users to obtain...

CVE-2008-3147

CVE-2008-3147 concerns WeFi 3.2.1.4.1. When diagnostic mode is enabled, the product stores WEP, WPA, and WPA2 access-point keys in cleartext within files such as ClientWeFiLog.dat, ClientWeFiLog.bak, and possibly a related .inf file under %PROGRAMFILES%\WeFi\Users. This creates local-privilege ri...

CVE-2008-2881

Relative Real Estate Systems 3.0 and earlier stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain sensitive information...

CVE-2008-2857

AlstraSoft AskMe Pro 2.1 and earlier stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain sensitive information...

Information disclosure

AlstraSoft AskMe Pro 2.1 and earlier stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain sensitive information...

CVE-2008-2857

AlstraSoft AskMe Pro 2.1 and earlier stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain sensitive information...

CVE-2008-2857

CVE-2008-2857 affects AlstraSoft AskMe Pro 2.1 and earlier. The root cause is that passwords are stored in cleartext in a MySQL database, enabling context-dependent attackers to obtain sensitive information. The connected records confirm the same description across multiple sources. No explicit r...

CVE-2008-2780

The Anubis aka Anubis+Ripe160 plugin before 1.3 for encrypt stores the unencrypted file's size in cleartext in the header of the encrypted file, which allows attackers to distinguish between encrypted data and random padding at the end of the encrypted file...

FreeBSD : ikiwiki -- cleartext passwords (90db9983-2f53-11dd-a0d8-0016d325a0ed)

The ikiwiki development team reports : Until version 2.48, ikiwiki stored passwords in cleartext in the userdb. That risks exposing all users' passwords if the file is somehow exposed. To pre-emtively guard against that, current versions of ikiwiki store password hashes using Eksblowfish...

Cisco Network Admission Control weak encryption

Shared secret is transmitted cleartext over the networkig during logging...

CVE-2008-1772

iScripts SocialWare stores passwords in cleartext in a database, which allows context-dependent attackers to obtain sensitive information...

Information disclosure

iScripts SocialWare stores passwords in cleartext in a database, which allows context-dependent attackers to obtain sensitive information...

CVE-2008-1772

iScripts SocialWare stores passwords in cleartext in a database, which allows context-dependent attackers to obtain sensitive information...

CVE-2008-1772

The CVE-2008-1772 entry concerns iScripts SocialWare, where passwords are stored in cleartext in the database. This creates an information disclosure risk because an attacker who can access the database could retrieve user credentials. The provided sources (NVD/NIST, CVE records) confirm the unde...

CVE-2008-1754

Symantec Altiris Deployment Solution before 6.9.164 stores the Deployment Solution Agent aka AClient password in cleartext in memory, which allows local users to obtain sensitive information by dumping the AClient.exe process memory...

CVE-2008-1754

Symantec Altiris Deployment Solution before 6.9.164 stores the Deployment Solution Agent aka AClient password in cleartext in memory, which allows local users to obtain sensitive information by dumping the AClient.exe process memory...