Xerox Document Centre multiple bugs

Directory traversal, cleartext passwords, etc...

[Full-Disclosure] PrimeBase SQL Database server cleartext password storage.

PrimeBase SQL Database server cleartext password storage. Vapid Labs Security Note 10/20/03 The PrimeBase SQL Database Server 4.2 stores passwords in clear text, and based on the installation users umask settings maybe readable by all local users. From the readme.txt file: "The Admin server will...

[securitylab.ru & security.nnov] Kerio Winroute Firewall Xroxy problem

Application: Kerio Winroute Firewall 5.10 Vendor: Kerio Technologies Inc. Vendor Site: http://www.kerio.com Remote: Yes Exploitable: Yes Risk level: Critical if proxy requires authentication Authors: Alexander Antipov & 3APA3A aka Pig Killer Authors Sites: http://www.securitylab.ru...

Password Safe information leak

Cleartext password could be found in memory...

leak of information in counterpane/Bruce Schneier's (now open source) Password Safe program

Program description: --- Password Safe is a tool that allows you to have a different password for all the different programs and websites that you deal with, without actually having to remember all those usernames and passwords. Originally created by Bruce Schneier's Counterpane Labs, Password Sa...

Novell groupwise cleartext passwords

Passwords are logged to file in cleartext...

CVE-2003-0499

CVE-2003-0499 affects Mantis 0.17.5 and earlier, where the database password is stored in cleartext in a world-readable configuration file. This permits local users to perform unauthorized database operations due to exposed credentials. Public sources in the connected documents confirm Debian DSA...

CVE-2003-0499

Mantis 0.17.5 and earlier stores its database password in cleartext in a world-readable configuration file, which allows local users to perform unauthorized database operations...

CVE-2003-0378

The Kerberos login authentication feature in Mac OS X, when used with an LDAPv3 server and LDAP bind authentication, may send cleartext passwords to the LDAP server when the AuthenticationAuthority attribute is not set...

CVE-2003-0378

The Kerberos login authentication feature in Mac OS X, when used with an LDAPv3 server and LDAP bind authentication, may send cleartext passwords to the LDAP server when the AuthenticationAuthority attribute is not set...

IRCXPro multiple bugs

Passwords are stored in cleartext, remote control is enabled by default with default password...

Pablo FTP Service multiple bugs

Anonymous user has full disk access by default. Passwords are stred in cleartext...

PFTP Cleartext Local Password Disclosure

The remote web server is running PFTP. This software stores the list of user names and passwords in clear text in \Program Files\PFTP\PFTPUSERS3.USR. An attacker with a full access to this host may use this flaw to gain access to other FTP servers used by the same users. C Tenable Network Securit...

Remote PC Access Server detection.

The remote host is running Remote PC Access Server. It is, therefore, affected by an information disclosure vulnerability due to the protocol transmitting username and passwords in cleartext. A man-in-the-middle attacker can exploit this to disclose the credentials and then take control of the...

PalmVNC weak encryption

Passwords are stored in cleartext...

[[ TH 026 Inc. ]] SA #4 - Blackmoon FTP Server cleartext passwords and User enumeration

Telhack 026 Inc. Security Advisory - 4 Name: Blackmoon FTP Server 2.6 Free Edition Impact: Medium Date: May 21 / 2003 Daniel Nystrm a.k.a. excE [email protected] I N F O BlackMoon FTP Server is an FTP daemon written specifically for Windows 2000/XP and above. It takes advantage of all the new...

Pure Secure weak encryption

Passwords for log access are stored in cleartext...

CaesarFTP weak encryption

Cleartext passwords in Program FilesCesarFTPsettings.ini...

BEA Weblogic cleartext passwords

Passwords are stored on disk in cleartext...

WebLogic Multiple Method Cleartext Password Disclosure

The remote web server is running WebLogic 7.0 or 7.0.0.1. There is a bug in these versions that could allow a local attacker to recover a WebLogic password if the screen of the WebLogic server is visible. In addition, a local user may be able to view cryptographic secrets, thereby facilitating...