SECURITY.NNOV: Sambar Server all versions password decoding

Hello, Topic: Sambar Server all versions password decoding Author: 3APA3A [email protected] SECURITY.NNOV advisories: http://www.security.nnov.ru/advisories Vulnerable: All Sambar versions up to 5.0 beta Impact: passwords can be decoded back to cleartext Vendor URL: http://www.sambar.com...

CVE-2001-0415

REDIPlus program, REDI.exe, stores passwords and user names in cleartext in the StartLog.txt log file, which allows local users to gain access to other accounts...

CVE-2001-0415

The CVE-2001-0415 entry concerns the REDIPlus program (REDI.exe), which logs passwords and user names in cleartext to StartLog.txt. Root cause is cleartext credential logging, enabling local users to access other accounts. Reported impact affects confidentiality, integrity, and availability parti...

CVE-2001-0415

REDIPlus program, REDI.exe, stores passwords and user names in cleartext in the StartLog.txt log file, which allows local users to gain access to other accounts...

Дырка в Oracle ADI (cleartext passwords)

Пароли содержатся в лог-файле в открытом виде...

CVE-2001-0273

pgp4pine Pine/PGP interface version 1.75-6 does not properly check to see if a public key has expired when obtaining the keys via Gnu Privacy Guard GnuPG, which causes the message to be sent in cleartext...

CVE-2001-0273

pgp4pine Pine/PGP interface version 1.75-6 does not properly check to see if a public key has expired when obtaining the keys via Gnu Privacy Guard GnuPG, which causes the message to be sent in cleartext...

Проблемы в TrendMicro ScanMail (cleartext password)

Логин и пароль администрирования хранятся в реестре в открытом для чтения ключе...

Проблемы в Redi (cleartext password)

Пароль в текстовом виде попадает в открытый log-файл...

CVE-2001-1464

Crystal Reports, when displaying data for a password protected database using HTML pages, embeds the username and password in cleartext in the HTML page and the URL, which allows remote attackers to obtain passwords...

CVE-2000-0516

When configured to store configuration information in an LDAP directory, Shiva Access Manager 5.0.0 stores the root DN Distinguished Name name and password in cleartext in a file that is world readable, which allows local users to compromise the LDAP server...

CVE-1999-0932

Mediahouse Statistics Server allows remote attackers to read the administrator password, which is stored in cleartext in the ss.cfg file...

CVE-2000-0516

The CVE-2000-0516 entry concerns Shiva Access Manager 5.0.0, where configuration data stored in an LDAP directory includes the root DN and password written in cleartext to a file that is world-readable. This local-access vulnerability enables a local attacker to read sensitive credentials and com...

CVE-2000-0605

Summary: CVE-2000-0605 affects Blackboard CourseInfo 4.0. The vulnerability is that local and SQL administrator usernames/passwords are stored in cleartext in a registry key whose ACL allows other users to access the passwords. This leads to potential confidentiality exposure of admin credentials...

CVE-2000-0605

Blackboard CourseInfo 4.0 stores the local and SQL administrator user names and passwords in cleartext in a registry key whose access control allows users to access the passwords...

CVE-2000-0605

Blackboard CourseInfo 4.0 stores the local and SQL administrator user names and passwords in cleartext in a registry key whose access control allows users to access the passwords...

CVE-2000-0516

When configured to store configuration information in an LDAP directory, Shiva Access Manager 5.0.0 stores the root DN Distinguished Name name and password in cleartext in a file that is world readable, which allows local users to compromise the LDAP server...

Postgresql cleartext password storage

Hi, While migrating some postgres databases to a different server including user accounts i noticed the following problem in the way postgres stores user passwords: SmellyCat:/var/postgres/data strings pgshadow someaccountname someaccountpassword anotheraccountname anotheraccountpassword...

PostgreSQL 6.3.26.5.3 - Cleartext Passwords

PostgreSQL 6.3.26.5.3 - Cleartext Passwords source: https://www.securityfocus.com/bid/1139/info PostgreSQL is a free RDBMS that is released under a Berkeley style license. PostgreSQL stores passwords for database users in a binary file called pgshadow. This file is readable by root and the postgr...

PostgreSQL 6.3.2/6.5.3 - Cleartext Passwords

source: https://www.securityfocus.com/bid/1139/info PostgreSQL is a free RDBMS that is released under a Berkeley style license. PostgreSQL stores passwords for database users in a binary file called pgshadow. This file is readable by root and the postgres user. Unfortunately, these passwords are...