CVE-2005-2160

CVE-2005-2160 affects Ipswitch IMail. The connected documents confirm that IMail stores usernames and passwords in cleartext in a cookie, enabling remote attackers to obtain sensitive information. Root cause: credentials exposed in a cookie; impact is disclosure of credentials (no integrity/avail...

CVE-2005-2160

IMail stores usernames and passwords in cleartext in a cookie, which allows remote attackers to obtain sensitive information...

PT-2005-3092 · Ipswitch · Imail

Name of the Vulnerable Software and Affected Versions: IMail affected versions not specified Description: The issue allows remote attackers to obtain sensitive information because usernames and passwords are stored in cleartext in a cookie. Recommendations: At the moment, there is no information...

DEBIAN-CVE-2005-2069

pamldap and nssldap, when used with OpenLDAP and connecting to a slave using TLS, does not use TLS for the subsequent connection if the client is referred to a master, which may cause a password to be sent in cleartext and allows remote attackers to sniff the password...

CVE-2005-2069

pamldap and nssldap, when used with OpenLDAP and connecting to a slave using TLS, does not use TLS for the subsequent connection if the client is referred to a master, which may cause a password to be sent in cleartext and allows remote attackers to sniff the password...

CVE-2002-1949

CVE-2002-1949 affects Iomega NAS A300U Admin Web Page, where credentials are transmitted in cleartext over the network, enabling remote password sniffing. Connected docs corroborate the issue and provide limited remediation guidance: IBM bulletin notes remediations for Jazz Foundation products (u...

CVE-2002-1949

The Network Attached Storage NAS Administration Web Page for Iomega NAS A300U transmits passwords in cleartext, which allows remote attackers to sniff the administrative password...

CVE-2002-1676

BindView NetInventory 1.0, when used with NetRC 1.0, allows local users to read sensitive information passwords by deleting the HOSTCFG.NI file and forcing an audit, which rewrites the HOSTCFG.NI to HOSTCFG.INI and stores the passwords in cleartext until the audit is complete...

Novell Groupwise Client memory cleartext password

Cleartext password is stored in memory...

CVE-2005-1828

CVE-2005-1828 affects D-Link DSL-504T. The root cause is that usernames and passwords are stored in cleartext in the router configuration file, enabling remote retrieval of sensitive data without authentication. Public documents confirm the affected device and exposure, but do not provide an offi...

CVE-2005-1828

D-Link DSL-504T stores usernames and passwords in cleartext in the router configuration file, which allows remote attackers to obtain sensitive information...

PT-2005-2795 · D Link · D-Link Dsl-504T

Name of the Vulnerable Software and Affected Versions: D-Link DSL-504T affected versions not specified Description: The issue allows remote attackers to obtain sensitive information because usernames and passwords are stored in cleartext in the router configuration file. Recommendations: At the...

CVE-2004-2049

eSeSIX Thintune thin clients running firmware 2.4.38 and earlier store sensitive usernames and passwords in cleartext in configuration files for the keeper library, which allows attackers to gain access...

CVE-2004-2049

Summary (CVE-2004-2049) : The eSeSIX Thintune thin clients (firmware

Digital Video Surveillance System weak authentication

Authentication mechanism is vulnerable to man-in-the-midle attack replay attack and cleartext recovery...

CVE-2005-1387

Cocktail 3.5.4 and possibly earlier in Mac OS X passes the administrative password on the command line to sudo in cleartext, which allows local users to gain sensitive information by running listing processes...

CVE-2005-1387

CVE-2005-1387 affects Cocktail 3.5.4 and possibly earlier on Mac OS X. The root cause is that the administrative password is passed on the command line to sudo in cleartext, allowing local users to reveal the password by inspecting running processes. This can lead to sensitive information exposur...

CVE-2005-0823

ThePoolClub 1 iPool and 2 iSnooker 1.6.81 and earlier stores usernames and passwords in cleartext in the MyDetails.txt file, which allows local users to gain privileges...

CVE-2005-0812

The web interface in NotifyLink 3.0 displays passwords in cleartext on the administrative page, which could allow remote attackers or local users to obtain sensitive information...

CVE-2005-0346

SafeNet SoftRemote VPN Client stores the VPN password pre-shared key in cleartext in memory of the IreIKE.exe process, which allows local users to gain sensitive information if they have access to that process...