Cleartext password access via SNMP in Nortel CVX

It's possible to retrive users list with passwords via default community public...

Multiple bugs in FTGate

Buffer overflows, memory leaks and other DoS, account disclosure, weak passwords encryption, cleartext authentication, etc...

Cleartext passphrase in PGP7 + Outlook

Passphrase is stored in memory in cleartext and presents in memory dump...

CVE-2001-1189

IBM Websphere Application Server 3.5.3 and earlier stores a password in cleartext in the sas.server.props file, which allows local users to obtain the passwords via a JSP script...

CVE-2001-0549

The CVE describes Symantec LiveUpdate 1.5 storing proxy passwords in cleartext in the registry (HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\LiveUpdate\Preferences\Proxy), allowing local users to read credentials. CERT/CC details confirm local read access to the registry key and recommend upgrading to Li...

CVE-2001-0549

Symantec LiveUpdate 1.5 stores proxy passwords in cleartext in a registry key, which could allow local users to obtain the passwords...

CVE-2001-0984

Password Safe 1.71 leaves cleartext passwords in memory when a user copies the password to the clipboard and minimizes Password Safe with the "Clear the password when minimized" and "Lock password database on minimize and prompt on restore" options enabled, which could allow an attacker with acce...

CVE-2001-0990

Inter7 vpopmail 4.10.35 and earlier, when using the MySQL module, compiles authentication information in cleartext into the libvpopmail.a library, which allows local users to obtain the MySQL username and password by inspecting the vpopmail programs that use the library...

CVE-2001-1520

Xircom REX 6000 allows local users to obtain the 10 digit PIN by starting a serial monitor, connecting to the personal digital assistant PDA via Rextools, and capturing the cleartext PIN...

CVE-2001-1536

Autogalaxy stores usernames and passwords in cleartext in cookies, which makes it easier for remote attackers to obtain authentication information and gain unauthorized access via sniffing or a cross-site scripting attack...

CVE-2001-1550

CentraOne 5.2 and Centra ASP with basic authentication enabled creates world-writable base64 encoded log files, which allows local users to obtain cleartext passwords from decoded log files and impersonate users...

CVE-2001-1527

easyNews 1.5 and earlier stores administration passwords in cleartext in settings.php, which allows local users to obtain the passwords and gain access...

CVE-2001-1571

The Remote Desktop client in Windows XP sends the most recent user account name in cleartext, which could allow remote attackers to obtain terminal server user account names via sniffing...

CVE-2001-1537

The default "basic" security setting' in config.php for TWIG webmail 2.7.4 and earlier stores cleartext usernames and passwords in cookies, which could allow attackers to obtain authentication information and gain privileges...

CVE-2001-1517

RunAs runas.exe in Windows 2000 stores cleartext authentication information in memory, which could allow attackers to obtain usernames and passwords by executing a process that is allocated the same memory page after termination of a RunAs command. NOTE: the vendor disputes this issue, saying tha...

CVE-2001-1519

RunAs runas.exe in Windows 2000 allows local users to create a spoofed named pipe when the service is stopped, then capture cleartext usernames and passwords when clients connect to the service. NOTE: the vendor disputes this issue, saying that administrative privileges are already required to...

PT-2001-2602 · Microsoft · Windows 2000 +1

Name of the Vulnerable Software and Affected Versions: Windows 2000 Description: The issue concerns the storage of cleartext authentication information in memory by RunAs runas.exe in Windows 2000. This could potentially allow attackers to obtain usernames and passwords by executing a process...

PT-2001-2621 · Unknown · Autogalaxy

Name of the Vulnerable Software and Affected Versions: Autogalaxy affected versions not specified Description: The issue allows remote attackers to obtain authentication information and gain unauthorized access. This is possible because Autogalaxy stores usernames and passwords in cleartext in...

PT-2001-2622 · Twig · Twig Webmail

Name of the Vulnerable Software and Affected Versions: TWIG webmail versions 2.7.4 and earlier Description: The default "basic" security setting in config.php for TWIG webmail stores cleartext usernames and passwords in cookies. This could allow attackers to obtain authentication information and...

CVE-2001-1189

IBM Websphere Application Server 3.5.3 and earlier stores a password in cleartext in the sas.server.props file, which allows local users to obtain the passwords via a JSP script...