CaesarFTP weak encryption

Cleartext passwords in Program FilesCesarFTPsettings.ini...

BEA Weblogic cleartext passwords

Passwords are stored on disk in cleartext...

WebLogic Multiple Method Cleartext Password Disclosure

The remote web server is running WebLogic 7.0 or 7.0.0.1. There is a bug in these versions that could allow a local attacker to recover a WebLogic password if the screen of the WebLogic server is visible. In addition, a local user may be able to view cryptographic secrets, thereby facilitating...

Apple AirPort Base Station Authentication Credential Encryption Weakness

The remote host is an Apple Airport Wireless Access Point which can be administrated on top of TCP port 5009. There is a design flaw in the administrative protocol which makes the clients which connect to this port send the password in cleartext although slightly obsfuscated. An attacker who has...

Sambar Server Cleartext Password Transmission

The remote Sambar server allows users to log in without using SSL. A man-in-the-middle attacker can exploit this to capture the passwords of the users of this server. The attacker can then use these to access the web mail accounts and modify the web pages on behalf of the users of the system. C...

12Planet Chat Server Administration Authentication Cleartext Credential Disclosure

The remote host is running 12Planet Chat Server, a web-based chat server written in Java. It is, therefore, affected by a credential disclosure vulnerability due to connections to this server being done via cleartext. A man-in-the-middle attacker can exploit this vulnerability to obtain the...

SAMBAR WebMail authentication cleartext passwords

Cleartext poassword authentication in WebMail access...

CVE-2002-1470

SHOUTcast 1.8.9 and earlier allows local users to obtain the cleartext administrative password via a GET request to port 8001, which causes the password to be logged in the world-readable scserv.log file...

CVE-2002-0911

Caldera Volution Manager 1.1 stores the Directory Administrator password in cleartext in the slapd.conf file, which could allow local users to gain privileges...

CVE-2002-0788

CVE-2002-0788 involves the PGP 7.0.3 client when used with Windows Encrypted File System (EFS) and the “wipe deleted files” option. The interaction creates cleartext temporary files that cannot be wiped or deleted due to strong permissions, potentially exposing cleartext data to local users or at...

CVE-2002-0911

Caldera Volution Manager 1.1 stores the Directory Administrator password in cleartext in the slapd.conf file, enabling local users to gain privileges. Affected product: Caldera Volution Manager 1.1. Root cause: password stored in plaintext in slapd.conf. Impact (as stated): local privilege escala...

CVE-2002-0848

Cisco VPN 5000 series concentrator hardware 6.0.21.0002 and earlier, and 5.2.23.0003 and earlier, when using RADIUS with a challenge type of Password Authentication Protocol PAP or Challenge, sends the user password in cleartext in a validation retry request, which could allow remote attackers to...

CVE-2002-0848

CVE-2002-0848 affects Cisco VPN 5000 series concentrator hardware 6.0.21.0002 and earlier, and 5.2.23.0003 and earlier. When using RADIUS with a PAP or Challenge, the system sends the user password in cleartext in a validation retry request, enabling potential password capture by remote attackers...

CVE-2001-0960

Computer Associates ARCserve for NT 6.61 SP2a and ARCserve 2000 7.0 stores the backup agent user name and password in cleartext in the aremote.dmp file in the ARCSERVE$ hidden share, which allows local and remote attackers to gain privileges...

CVE-2001-0921

Technical details about CVE-2001-0921 are not publicly provided in the connected documents. The initial description describes a memory-sensitive form-field exposure in Netscape 4.79 on macOS; monitor for updates.

CVE-2001-0960

ARCserve for NT 6.61 SP2a and ARCserve 2000 7.0 store the backup agent username and password in cleartext in the aremote.dmp file on the ARCSERVE$ hidden share. The Nessus plugin item ARCSERVE_HIDDEN_SHARE.NASL confirms the ARCSERVE$ share is accessible and that multiple ARCserve versions retain ...

D-Link DSL unauthorized access

public and private community are accessable by default. public community leaks account infromation in cleartext...

CVE-2002-1554

Cisco ONS15454 and ONS15327 running ONS before 3.4 stores usernames and passwords in cleartext in the image database for the TCC, TCC+ or XTC, which could allow attackers to gain privileges by obtaining the passwords from the image database or a backup...

D-Link DSL Broadband Modem SNMP Cleartext ISP Credential Disclosure

This script uses SNMP to obtain the account and password of the remote ADSL connection. D-Link DSL Broadband routers uses a default community string and stores the ISP credentials in cleartext. C Tenable Network Security, Inc. Ref: Date: 27 Mar 2003 15:31:41 -0000 From: Arhont Information Securit...

3com RAS 1500 Configuration Disclosure

The remote 3com SuperStack II Remote Access System 1500 discloses its user configuration usersettings.cfg when the file is requested through the web interface. The file is transmitted in cleartext and contains the password of the device as well as other sensitive information. An attacker may use...