Дырка в Oracle ADI (cleartext passwords)

Пароли содержатся в лог-файле в открытом виде...

CVE-2001-0273

pgp4pine Pine/PGP interface version 1.75-6 does not properly check to see if a public key has expired when obtaining the keys via Gnu Privacy Guard GnuPG, which causes the message to be sent in cleartext...

CVE-2001-0273

pgp4pine Pine/PGP interface version 1.75-6 does not properly check to see if a public key has expired when obtaining the keys via Gnu Privacy Guard GnuPG, which causes the message to be sent in cleartext...

Проблемы в TrendMicro ScanMail (cleartext password)

Логин и пароль администрирования хранятся в реестре в открытом для чтения ключе...

Проблемы в Redi (cleartext password)

Пароль в текстовом виде попадает в открытый log-файл...

CVE-2001-1464

Crystal Reports, when displaying data for a password protected database using HTML pages, embeds the username and password in cleartext in the HTML page and the URL, which allows remote attackers to obtain passwords...

CVE-1999-0932

Mediahouse Statistics Server allows remote attackers to read the administrator password, which is stored in cleartext in the ss.cfg file...

CVE-2000-0516

The CVE-2000-0516 entry concerns Shiva Access Manager 5.0.0, where configuration data stored in an LDAP directory includes the root DN and password written in cleartext to a file that is world-readable. This local-access vulnerability enables a local attacker to read sensitive credentials and com...

CVE-2000-0516

When configured to store configuration information in an LDAP directory, Shiva Access Manager 5.0.0 stores the root DN Distinguished Name name and password in cleartext in a file that is world readable, which allows local users to compromise the LDAP server...

CVE-2000-0605

Blackboard CourseInfo 4.0 stores the local and SQL administrator user names and passwords in cleartext in a registry key whose access control allows users to access the passwords...

CVE-2000-0605

Summary: CVE-2000-0605 affects Blackboard CourseInfo 4.0. The vulnerability is that local and SQL administrator usernames/passwords are stored in cleartext in a registry key whose ACL allows other users to access the passwords. This leads to potential confidentiality exposure of admin credentials...

CVE-2000-0605

Blackboard CourseInfo 4.0 stores the local and SQL administrator user names and passwords in cleartext in a registry key whose access control allows users to access the passwords...

CVE-2000-0516

When configured to store configuration information in an LDAP directory, Shiva Access Manager 5.0.0 stores the root DN Distinguished Name name and password in cleartext in a file that is world readable, which allows local users to compromise the LDAP server...

Postgresql cleartext password storage

Hi, While migrating some postgres databases to a different server including user accounts i noticed the following problem in the way postgres stores user passwords: SmellyCat:/var/postgres/data strings pgshadow someaccountname someaccountpassword anotheraccountname anotheraccountpassword...

PostgreSQL 6.3.26.5.3 - Cleartext Passwords

PostgreSQL 6.3.26.5.3 - Cleartext Passwords source: https://www.securityfocus.com/bid/1139/info PostgreSQL is a free RDBMS that is released under a Berkeley style license. PostgreSQL stores passwords for database users in a binary file called pgshadow. This file is readable by root and the postgr...

PostgreSQL 6.3.2/6.5.3 - Cleartext Passwords

source: https://www.securityfocus.com/bid/1139/info PostgreSQL is a free RDBMS that is released under a Berkeley style license. PostgreSQL stores passwords for database users in a binary file called pgshadow. This file is readable by root and the postgres user. Unfortunately, these passwords are...

CVE-2000-0241

The CVE-2000-0241 entry concerns vqSoft vqServer, where passwords and other sensitive data are stored in cleartext in the server.cfg file. This exposed data can let an attacker gain privileges if they can read the configuration file. The available connected documentation confirms the issue, but d...

CVE-2000-0241

vqSoft vqServer stores sensitive information such as passwords in cleartext in the server.cfg file, which allows attackers to gain privileges...

CVE-2000-0220

ZoneAlarm sends sensitive system and network information in cleartext to the Zone Labs server if a user requests more information about an event...

CVE-2000-0220

ZoneAlarm is reported to send sensitive system and network information in cleartext to the Zone Labs server when a user requests more information about an event. The PT-2000-1202 entry attributes the vulnerability to ZoneAlarm (affected versions not specified) and reiterates that the issue involv...