HP JetDirect Device SNMP Request Cleartext Admin Credential Disclosure

It is possible to obtain the password of the remote HP JetDirect web server by sending SNMP requests. An attacker may use this information to gain administrative access to the remote printer. TRUSTED...

CVE-2002-1949

The Network Attached Storage NAS Administration Web Page for Iomega NAS A300U transmits passwords in cleartext, which allows remote attackers to sniff the administrative password...

CVE-2002-2389

TheServer 1.74 web server stores server.ini under the web document root with insufficient access control, which allows remote attackers to obtain cleartext passwords and gain access to server log files...

CVE-2002-2355

Netgear FM114P firmware 1.3 wireless firewall, when configured to backup configuration information, stores DDNS DynDNS user name and password, MAC address filtering table and possibly other information in cleartext, which could allow local users to obtain sensitive information...

CVE-2002-1676

BindView NetInventory 1.0, when used with NetRC 1.0, allows local users to read sensitive information passwords by deleting the HOSTCFG.NI file and forcing an audit, which rewrites the HOSTCFG.NI to HOSTCFG.INI and stores the passwords in cleartext until the audit is complete...

CVE-2002-2326

The default configuration of Mail.app in Mac OS X 10.0 through 10.0.4 and 10.1 through 10.1.5 sends iDisk authentication credentials in cleartext when connecting to Mac.com, which could allow remote attackers to obtain passwords by sniffing network traffic...

CVE-2002-2384

hotfoon4.exe in Hotfoon 4.00 stores user names and passwords in cleartext in the hotfoon2 registry key, which allows local users to gain access to user accounts and steal phone service...

CVE-2002-1955

Iomega NAS A300U uses cleartext LANMAN authentication when mounting CIFS/SMB drives, which allows remote attackers to perform a man-in-the-middle attack...

PT-2002-2670 · Iomega · Iomega Nas A300U

Name of the Vulnerable Software and Affected Versions: Iomega NAS A300U Description: The issue concerns the transmission of passwords in cleartext by the Network Attached Storage NAS Administration Web Page, allowing remote attackers to intercept the administrative password. Recommendations: For...

Cleartext Cryptainer memory password

Cleartext password in process' memory...

Multiple bugs in hotfoon dialer

Buffer overflows, cleartext passwords, etc...

Webserver 4D weak encryption

Passwords are stored in cleartext...

Crossitescripting in Argosoft Mail Server Pro

Crossite scripting in WebMail, cleartext passwords in cookie :...

CVE-2002-0949

Telindus 1100 series ADSL router allows remote attackers to gain privileges to the device via a certain packet to UDP port 9833, which generates a reply that includes the router's password and other sensitive information in cleartext...

CVE-2002-0911

Caldera Volution Manager 1.1 stores the Directory Administrator password in cleartext in the slapd.conf file, which could allow local users to gain privileges...

Multiple bugs in SMALL HTTP Server

FTP access to whole disk is open by default, passwords are stored in cleartext, password submission attemps are not limited...

EUVD-2002-0938

Telindus 1100 series ADSL router allows remote attackers to gain privileges to the device via a certain packet to UDP port 9833, which generates a reply that includes the router's password and other sensitive information in cleartext...

CVE-2002-0788

An interaction between PGP 7.0.3 with the "wipe deleted files" option, when used on Windows Encrypted File System EFS, creates a cleartext temporary files that cannot be wiped or deleted due to strong permissions, which could allow certain local users or attackers with physical access to obtain...

CVE-2002-0848

Cisco VPN 5000 series concentrator hardware 6.0.21.0002 and earlier, and 5.2.23.0003 and earlier, when using RADIUS with a challenge type of Password Authentication Protocol PAP or Challenge, sends the user password in cleartext in a validation retry request, which could allow remote attackers to...

PT-2002-1809 · Pgp +1 · Pgp +1

Name of the Vulnerable Software and Affected Versions: PGP version 7.0.3 Description: The issue arises from an interaction between PGP and the Windows Encrypted File System EFS when the "wipe deleted files" option is used. This interaction creates cleartext temporary files that cannot be wiped or...