CVE-1999-1470

CVE-1999-1470 concerns Eastman Work Management 3.21, which stores passwords in cleartext in the COMMON and LOCATOR registry keys, enabling local users to gain privileges. The vulnerability is characterized as a local, low-complexity issue with partial confidentiality, integrity, and availability ...

CVE-1999-1353

CVE-1999-1353 affects Nosque MsgCore 2.14, where passwords are stored in cleartext: admin password in the AdmPasswd registry key and user passwords in the Userbase.dbf data file. This could allow local users to gain privileges. The connected documents provide the vulnerability description and imp...

CVE-1999-1444

genkey utility in Alibaba 2.0 generates RSA key pairs with an exponent of 1, which results in transactions that are sent in cleartext...

CVE-1999-1280

In CVE-1999-1280, Hummingbird Exceed 6.0.1.0 includes a development/testing DLL that logs user names and passwords in cleartext in the test.log file. The issue affects the DLL usage within Exceed; the precise vulnerable surface is the development/testing DLL component. Documented impact indicates...

CVE-1999-1282

The CVE-1999-1282 entry concerns RealSystem G2 server where the administrator password is stored in cleartext in a world-readable configuration file. The underlying impact is that local users can gain privileges on the affected system due to this configuration weakness. The provided documents do ...

CVE-1999-1277

The CVE-1999-1277 issue affects the BackWeb client, where the proxy authentication username and password are stored in cleartext in the Communication registry key. This exposes credentials to other local users, enabling potential privilege escalation through password reading. Root cause: credenti...

CVE-1999-1277

BackWeb client stores the username and password in cleartext for proxy authentication in the Communication registry key, which could allow other local users to gain privileges by reading the password...

CVE-1999-1444

CVE-1999-1444 affects the genkey utility in Alibaba 2.0, which generates RSA key pairs with an exponent of 1. The underlying issue is the weak exponent, enabling transactions to be sent in cleartext. The connected documents confirm the vulnerability scope but do not provide a published exploit, a...

CVE-2001-0990

Inter7 vpopmail 4.10.35 and earlier, when using the MySQL module, compiles authentication information in cleartext into the libvpopmail.a library, which allows local users to obtain the MySQL username and password by inspecting the vpopmail programs that use the library...

CVE-2001-0528

Oracle E-Business Suite Release 11i Applications Desktop Integrator ADI version 7.x includes a debug version of FNDPUB11I.DLL, which logs the APPS schema password in cleartext in a debug file, which allows local users to obtain the password and gain privileges...

hypo_linksys_advisory.txt

:UPDATE hypoclear security advisory UPDATE: Update Note: Thanks to the guys on the vuln-watch list who helped with a better solution! Vendor : Linksys | http://www.linksys.com/ Product : EtherFast 4-Port Cable/DSL Router Category : Design Flaw Date : 08-02-01 Update : 08-02-01 CONTENTS 1. Overvie...

CVE-2001-0620

iPlanet Calendar Server 5.0p2 and earlier allows a local attacker to gain access to the Netscape Admin Server NAS LDAP database and read arbitrary files by obtaining the cleartext administrator username and password from the configuration file, which has insecure permissions...

SECURITY.NNOV: Sambar Server all versions password decoding

Hello, Topic: Sambar Server all versions password decoding Author: 3APA3A [email protected] SECURITY.NNOV advisories: http://www.security.nnov.ru/advisories Vulnerable: All Sambar versions up to 5.0 beta Impact: passwords can be decoded back to cleartext Vendor URL: http://www.sambar.com...

Sambar Server all versions password decoding

Topic: Sambar Server all versions password decoding Author: 3APA3A SECURITY.NNOV advisories: http://www.security.nnov.ru/advisories Vulnerable: All Sambar versions up to 5.0 beta Impact: passwords can be decoded back to cleartext Vendor URL: http://www.sambar.com Released: 24 July 2001 Credits:...

CVE-2001-0415

REDIPlus program, REDI.exe, stores passwords and user names in cleartext in the StartLog.txt log file, which allows local users to gain access to other accounts...

CVE-2001-0415

REDIPlus program, REDI.exe, stores passwords and user names in cleartext in the StartLog.txt log file, which allows local users to gain access to other accounts...

CVE-2001-0415

The CVE-2001-0415 entry concerns the REDIPlus program (REDI.exe), which logs passwords and user names in cleartext to StartLog.txt. Root cause is cleartext credential logging, enabling local users to access other accounts. Reported impact affects confidentiality, integrity, and availability parti...

Дырка в Oracle ADI (cleartext passwords)

Пароли содержатся в лог-файле в открытом виде...

CVE-2001-0273

pgp4pine Pine/PGP interface version 1.75-6 does not properly check to see if a public key has expired when obtaining the keys via Gnu Privacy Guard GnuPG, which causes the message to be sent in cleartext...

CVE-2001-0273

pgp4pine Pine/PGP interface version 1.75-6 does not properly check to see if a public key has expired when obtaining the keys via Gnu Privacy Guard GnuPG, which causes the message to be sent in cleartext...