Avaya IP Office Phone Manager Local Password Disclosure Exploit

No description provided by source. include windows.h include stdio.h include string.h / Filename: exploit.c Title: Avaya IP Office Phone Manager - Cleartext Sensitive Data Vulnerability Exploit v0.01 Author: pagvac Adrian Pastor Date: 24th Feb, 2005 Other info: tested on version 2.013. Compile as...

FTP Supports Cleartext Authentication

The remote FTP server allows the user's name and password to be transmitted in cleartext, which could be intercepted by a network sniffer or a man-in-the-middle attack. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid34324; scriptversion"1.28";...

CVE-2008-2312

Network Preferences in Apple Mac OS X 10.4.11 stores PPP passwords in cleartext in a world-readable file, which allows local users to obtain sensitive information by reading this file...

CVE-2008-2312

Network Preferences in Apple Mac OS X 10.4.11 stores PPP passwords in cleartext in a world-readable file, which allows local users to obtain sensitive information by reading this file...

Design/Logic Flaw

Network Preferences in Apple Mac OS X 10.4.11 stores PPP passwords in cleartext in a world-readable file, which allows local users to obtain sensitive information by reading this file...

CVE-2008-2312

CVE-2008-2312 affects Apple Mac OS X 10.4.11: Network Preferences stores PPP passwords in cleartext in a world-readable file, allowing local users to read sensitive credentials. Root cause: credentials stored insecurely. Impact: confidentiality of PPP passwords isCOMPLETE; exploitation is local. ...

Grub, DiskCryptor, LILO, DriveCrypt, TrueCRYPT and Intel, IBM, HP BIOS disk ebcryption utilities information leak

Cleartext password is not erased from BIOS data buffer...

Default credentials

The Base Service Utilities component in IBM DB2 9.1 before Fixpak 5 retains a cleartext password in memory after the database connection that sent the password is fully established, which might allow local users to obtain sensitive information by reading a memory dump...

CVE-2008-3857

The Base Service Utilities component in IBM DB2 9.1 before Fixpak 5 retains a cleartext password in memory after the database connection that sent the password is fully established, which might allow local users to obtain sensitive information by reading a memory dump...

CVE-2008-3857

CVE-2008-3857 affects IBM DB2 9.1 Base Service Utilities; before Fixpak 5, it may retain the cleartext password in memory after the connection is established, potentially allowing local users to read sensitive data from a memory dump. Exploitation details are not provided in the available documen...

Information disclosure

Crafty Syntax Live Help CSLH 2.14.6 and earlier stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain sensitive information...

CVE-2008-3840

Crafty Syntax Live Help CSLH 2.14.6 and earlier stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain sensitive information...

CVE-2008-3840

Crafty Syntax Live Help CSLH 2.14.6 and earlier stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain sensitive information...

CVE-2008-3289

EMC Dantz Retrospect Backup Client 7.5.116 sends the password hash in cleartext at an unspecified point, which allows remote attackers to obtain sensitive information via a crafted packet...

CVE-2008-3289

EMC Dantz Retrospect Backup Client 7.5.116 sends the password hash in cleartext at an unspecified point, which allows remote attackers to obtain sensitive information via a crafted packet...

PT-2008-4695 · Emc · Emc Dantz Retrospect Backup Client

Name of the Vulnerable Software and Affected Versions: EMC Dantz Retrospect Backup Client version 7.5.116 Description: The issue allows remote attackers to obtain sensitive information via a crafted packet, as the password hash is sent in cleartext. Recommendations: For version 7.5.116, consider...

Bacula: Information disclosure

Background Bacula is a network based backup suite. Description Matthijs Kooijman reported that the "makecatalogbackup" script uses the MySQL password as a command line argument when invoking other programs. Impact A local attacker could list the processes on the local machine when the script is...

CVE-2008-3147

WeFi 3.2.1.4.1, when diagnostic mode is enabled, stores 1 WEP, 2 WPA, and 3 WPA2 access-point keys in a ClientWeFiLog.dat, b ClientWeFiLog.bak, and possibly c a certain .inf file under %PROGRAMFILES%\WeFi\Users, and uses cleartext for the ClientWeFiLog files, which allows local users to obtain...

Design/Logic Flaw

WeFi 3.2.1.4.1, when diagnostic mode is enabled, stores 1 WEP, 2 WPA, and 3 WPA2 access-point keys in a ClientWeFiLog.dat, b ClientWeFiLog.bak, and possibly c a certain .inf file under %PROGRAMFILES%\WeFi\Users, and uses cleartext for the ClientWeFiLog files, which allows local users to obtain...

CVE-2008-3147

CVE-2008-3147 concerns WeFi 3.2.1.4.1. When diagnostic mode is enabled, the product stores WEP, WPA, and WPA2 access-point keys in cleartext within files such as ClientWeFiLog.dat, ClientWeFiLog.bak, and possibly a related .inf file under %PROGRAMFILES%\WeFi\Users. This creates local-privilege ri...