CVE-1999-1372

Triactive Remote Manager with Basic authentication enabled stores the username and password in cleartext in registry keys, which could allow local users to gain privileges...

CVE-1999-1280

Hummingbird Exceed 6.0.1.0 inadvertently includes a DLL that was meant for development and testing, which logs user names and passwords in cleartext in the test.log file...

CVE-1999-1470

CVE-1999-1470 concerns Eastman Work Management 3.21, which stores passwords in cleartext in the COMMON and LOCATOR registry keys, enabling local users to gain privileges. The vulnerability is characterized as a local, low-complexity issue with partial confidentiality, integrity, and availability ...

CVE-1999-1323

CVE-1999-1323 affects Norton AntiVirus for Internet Email Gateways (NAVIEG) 1.0.1.7 and earlier and Norton AntiVirus for MS Exchange (NAVMSE) 1.5 and earlier. The root cause is that administrator passwords are stored in cleartext in (1) the navieg.ini file for NAVIEG and (2) the ModifyPassword re...

CVE-1999-1323

Norton AntiVirus for Internet Email Gateways NAVIEG 1.0.1.7 and earlier, and Norton AntiVirus for MS Exchange NAVMSE 1.5 and earlier, store the administrator password in cleartext in 1 the navieg.ini file for NAVIEG, and 2 the ModifyPassword registry key in NAVMSE...

CVE-1999-1277

The CVE-1999-1277 issue affects the BackWeb client, where the proxy authentication username and password are stored in cleartext in the Communication registry key. This exposes credentials to other local users, enabling potential privilege escalation through password reading. Root cause: credenti...

CVE-1999-1280

In CVE-1999-1280, Hummingbird Exceed 6.0.1.0 includes a development/testing DLL that logs user names and passwords in cleartext in the test.log file. The issue affects the DLL usage within Exceed; the precise vulnerable surface is the development/testing DLL component. Documented impact indicates...

CVE-1999-1277

BackWeb client stores the username and password in cleartext for proxy authentication in the Communication registry key, which could allow other local users to gain privileges by reading the password...

CVE-1999-1282

The CVE-1999-1282 entry concerns RealSystem G2 server where the administrator password is stored in cleartext in a world-readable configuration file. The underlying impact is that local users can gain privileges on the affected system due to this configuration weakness. The provided documents do ...

CVE-1999-1444

CVE-1999-1444 affects the genkey utility in Alibaba 2.0, which generates RSA key pairs with an exponent of 1. The underlying issue is the weak exponent, enabling transactions to be sent in cleartext. The connected documents confirm the vulnerability scope but do not provide a published exploit, a...

CVE-1999-1444

genkey utility in Alibaba 2.0 generates RSA key pairs with an exponent of 1, which results in transactions that are sent in cleartext...

CVE-2001-0990

Inter7 vpopmail 4.10.35 and earlier, when using the MySQL module, compiles authentication information in cleartext into the libvpopmail.a library, which allows local users to obtain the MySQL username and password by inspecting the vpopmail programs that use the library...

CVE-2001-0528

Oracle E-Business Suite Release 11i Applications Desktop Integrator ADI version 7.x includes a debug version of FNDPUB11I.DLL, which logs the APPS schema password in cleartext in a debug file, which allows local users to obtain the password and gain privileges...

hypo_linksys_advisory.txt

:UPDATE hypoclear security advisory UPDATE: Update Note: Thanks to the guys on the vuln-watch list who helped with a better solution! Vendor : Linksys | http://www.linksys.com/ Product : EtherFast 4-Port Cable/DSL Router Category : Design Flaw Date : 08-02-01 Update : 08-02-01 CONTENTS 1. Overvie...

CVE-2001-0620

iPlanet Calendar Server 5.0p2 and earlier allows a local attacker to gain access to the Netscape Admin Server NAS LDAP database and read arbitrary files by obtaining the cleartext administrator username and password from the configuration file, which has insecure permissions...

SECURITY.NNOV: Sambar Server all versions password decoding

Hello, Topic: Sambar Server all versions password decoding Author: 3APA3A [email protected] SECURITY.NNOV advisories: http://www.security.nnov.ru/advisories Vulnerable: All Sambar versions up to 5.0 beta Impact: passwords can be decoded back to cleartext Vendor URL: http://www.sambar.com...

Sambar Server all versions password decoding

Topic: Sambar Server all versions password decoding Author: 3APA3A SECURITY.NNOV advisories: http://www.security.nnov.ru/advisories Vulnerable: All Sambar versions up to 5.0 beta Impact: passwords can be decoded back to cleartext Vendor URL: http://www.sambar.com Released: 24 July 2001 Credits:...

CVE-2001-0415

REDIPlus program, REDI.exe, stores passwords and user names in cleartext in the StartLog.txt log file, which allows local users to gain access to other accounts...

CVE-2001-0415

REDIPlus program, REDI.exe, stores passwords and user names in cleartext in the StartLog.txt log file, which allows local users to gain access to other accounts...

CVE-2001-0415

The CVE-2001-0415 entry concerns the REDIPlus program (REDI.exe), which logs passwords and user names in cleartext to StartLog.txt. Root cause is cleartext credential logging, enabling local users to access other accounts. Reported impact affects confidentiality, integrity, and availability parti...