rlogin Service Detection

The rlogin service is running on the remote host. This service is vulnerable since data is passed between the rlogin client and server in cleartext. A man-in-the-middle attacker can exploit this to sniff logins and passwords. Also, it may allow poorly authenticated logins without passwords. If th...

Microsoft Internet Explorer 5 - FTP Password Storage

Microsoft Internet Explorer 5.0 for Windows 2000/Windows NT 4 FTP Password Storage Vulnerability source: https://www.securityfocus.com/bid/610/info FTP usernames and passwords for sites accessed via Internet Explorer 5.X are stored cleartext in history files stored under...

Microsoft Internet Explorer 5 - FTP Password Storage

Microsoft Internet Explorer 5 - FTP Password Storage Microsoft Internet Explorer 5.0 for Windows 2000/Windows NT 4 FTP Password Storage Vulnerability source: https://www.securityfocus.com/bid/610/info FTP usernames and passwords for sites accessed via Internet Explorer 5.X are stored cleartext in...

rsh Service Detection

The rsh service is running on the remote host. This service is vulnerable since data is passed between the rsh client and server in cleartext. A man-in-the-middle attacker can exploit this to sniff logins and passwords. Also, it may allow poorly authenticated logins without passwords. If the host...

shadow.passwds.txt

Date: Fri, 11 Jun 1999 10:11:29 EET From: Emils Klotins To: [email protected] Subject: useradd -p stores cleartext passwords / shadow-980724 Hello. Sorry if this is reported already. Didn't find it in Bugtraq archives nor in SuSE support db. OS: SuSE Linux 6.1 Program: useradd Package:...

CVE-1999-1470

Eastman Work Management 3.21 stores passwords in cleartext in the COMMON and LOCATOR registry keys, which could allow local users to gain privileges...

CVE-1999-1323

Norton AntiVirus for Internet Email Gateways NAVIEG 1.0.1.7 and earlier, and Norton AntiVirus for MS Exchange NAVMSE 1.5 and earlier, store the administrator password in cleartext in 1 the navieg.ini file for NAVIEG, and 2 the ModifyPassword registry key in NAVMSE...

CVE-1999-1372

Triactive Remote Manager with Basic authentication enabled stores the username and password in cleartext in registry keys, which could allow local users to gain privileges...

CVE-1999-1277

BackWeb client stores the username and password in cleartext for proxy authentication in the Communication registry key, which could allow other local users to gain privileges by reading the password...

CVE-1999-1282

RealSystem G2 server stores the administrator password in cleartext in a world-readable configuration file, which allows local users to gain privileges...

CVE-1999-1280

Hummingbird Exceed 6.0.1.0 inadvertently includes a DLL that was meant for development and testing, which logs user names and passwords in cleartext in the test.log file...

Check Point Software Firewall-1 3.01 4.0 - Session Agent Impersonation

Check Point Software Firewall-1 3.01 4.0 - Session Agent Impersonation source: https://www.securityfocus.com/bid/1661/info A vulnerability exists in the "Session Agent" portion of Firewall-1, from Check Point. This vulnerability appears to affect all versions of the session agent prior to the one...

Check Point Software Firewall-1 3.0/1 4.0 - Session Agent Impersonation

source: https://www.securityfocus.com/bid/1661/info A vulnerability exists in the "Session Agent" portion of Firewall-1, from Check Point. This vulnerability appears to affect all versions of the session agent prior to the one shipped in FW-1 4.1. The session agent listens on a Windows 9x or NT b...

CVE-2024-33900

KeePassXC 2.7.7 allows an attacker who has the privileges of the victim to recover cleartext credentials via a memory dump. NOTE: the vendor disputes this because memory-management constraints make this unavoidable in the current design and other realistic designs...

CVE-2024-36081

Westermo EDW-100 devices through 2024-05-03 allow an unauthenticated user to download a configuration file containing a cleartext password. NOTE: this is a serial-to-Ethernet converter that should not be placed at the edge of the network...