Code injection

The service utility in EMC Avamar 5.x before 5.0.4 uses cleartext to transmit event details in 1 service requests and 2 e-mail messages, which might allow remote attackers to obtain sensitive information by sniffing the network...

CVE-2011-0442

The service utility in EMC Avamar 5.x before 5.0.4 uses cleartext to transmit event details in 1 service requests and 2 e-mail messages, which might allow remote attackers to obtain sensitive information by sniffing the network...

CVE-2011-0442

EMC Avamar 5.x before 5.0.4 transmits event details in cleartext over service requests and internal emails, potentially exposing sensitive customer information to network sniffing. Affected versions include EMC Avamar 5.0.0-407 and later but prior to 5.0.4 (5.0 SP4). Resolution guidance from EMC ...

Debian Security Advisory DSA 2179-1 (dtc)

The remote host is missing an update to dtc announced via advisory DSA 2179-1. OpenVAS Vulnerability Test $Id: deb21791.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2179-1 dtc Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

CVE-2011-0436

The registeruser function in client/newaccountform.php in Domain Technologie Control DTC before 0.32.9 includes a cleartext password in an e-mail message, which makes it easier for remote attackers to obtain sensitive information by sniffing the network...

Design/Logic Flaw

The registeruser function in client/newaccountform.php in Domain Technologie Control DTC before 0.32.9 includes a cleartext password in an e-mail message, which makes it easier for remote attackers to obtain sensitive information by sniffing the network...

CVE-2011-0436

The registeruser function in client/newaccountform.php in Domain Technologie Control DTC before 0.32.9 includes a cleartext password in an e-mail message, which makes it easier for remote attackers to obtain sensitive information by sniffing the network...

CVE-2011-0436

CVE-2011-0436 affects Domain Technologie Control (DTC) prior to 0.32.9. The register_user flow in client/new_account_form.php sends the new account password in plaintext via email, enabling password exposure if network traffic is sniffed. Public sources (NVD/OpenVAS/DSA references) confirm this i...

Debian DSA-2179-1 : dtc - SQL injection

Ansgar Burchardt discovered several vulnerabilities in DTC, a web control panel for admin and accounting hosting services. - CVE-2011-0434 The bwpermoth.php graph contains a SQL injection vulnerability. - CVE-2011-0435 Insufficient checks in bwpermonth.php can lead to bandwidth usage information...

[SECURITY] [DSA 2179-1] dtc security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2179-1 [email protected] http://www.debian.org/security/ Florian Weimer March 02, 2011 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2179-1] dtc security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2179-1 [email protected] http://www.debian.org/security/ Florian Weimer March 02, 2011 http://www.debian.org/security/faq -...

DSA-2179-1 dtc - SQL injection

Bulletin has no description...

dtc -- multiple vulnerabilities

Ansgar Burchardt reports: Ansgar Burchardt discovered several vulnerabilities in DTC, a web control panel for admin and accounting hosting services: The bwpermoth.php graph contains an SQL injection vulnerability; insufficient checks in bwpermonth.php can lead to bandwidth usage information...

[SECURITY] Fedora 14 Update: krb5-1.8.2-8.fc14

Kerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of cleartext passwords...

Rootkit.com database leaked by Anonymous Hackers, Available for Download !

On February 6, 2011, as part of their attack on HBGary, the Anonymous group social engineered administrator of rootkit.com, Jussi Jaakonaho, to gain root access to rootkit.com. The entire MySQL database backup was then released by Anonymous and announced using HBGary's CEO Twitter account,...

Mandriva Update for libuser MDVSA-2011:019 (libuser)

Check for the Version of libuser OpenVAS Vulnerability Test Mandriva Update for libuser MDVSA-2011:019 libuser Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Mandriva Update for libuser MDVSA-2011:019 (libuser)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Mandriva Linux Security Advisory : libuser (MDVSA-2011:019)

A vulnerability has been found and corrected in libuser : libuser before 0.57 uses a cleartext password value of 1 !! or 2 x for new LDAP user accounts, which makes it easier for remote attackers to obtain access by specifying one of these values CVE-2011-0002. Packages for 2009.0 are provided as...

Default credentials

Best Practical Solutions RT 3.x before 3.8.9rc2 and 4.x before 4.0.0rc4 uses the MD5 algorithm for password hashes, which makes it easier for context-dependent attackers to determine cleartext passwords via a brute-force attack on the database...

CVE-2011-0410

CollabNet ScrumWorks Basic 1.8.4 uses cleartext credentials for network communication and the internal database, which makes it easier for context-dependent attackers to obtain sensitive information by 1 sniffing the network for transmissions of Java objects or 2 reading the database...