CVE-2003-1392: Undefined Security Weakness

CryptoBuddy 1.0 and 1.2 does not use the user-supplied passphrase to encrypt data, which could allow local users to use their own passphrase to decrypt the data...

SLAD Fetch Results

This script connects to SLAD on a remote host to fetch the result from scripts started earlier. To work properly, this script requires to be provided with a valid SSH login by means of an SSH key with pass- phrase if the SSH public key is passphrase-protected, or a password to log in. OpenVAS...

Information disclosure

Unspecified vulnerability in the G/PGP GPG Plugin 2.0 for Squirrelmail 1.4.10a allows remote authenticated users to execute arbitrary commands via unspecified vectors, possibly related to the passphrase variable in the gpgsignattachment function, aka ZD-00000004. this information is based upon a...

CVE-2007-3634: Undefined Security Weakness

Unspecified vulnerability in the G/PGP GPG Plugin 2.0 for Squirrelmail 1.4.10a allows remote authenticated users to execute arbitrary commands via unspecified vectors, possibly related to the passphrase variable in the gpgsignattachment function, aka ZD-00000004. this information is based upon a...

DEBIAN-CVE-2007-0844

The authviakey function in pamssh.c in pamssh before 1.92, when the allowblankpassphrase option is disabled, allows remote attackers to bypass authentication restrictions and use private encryption keys requiring a blank passphrase by entering a non-blank passphrase...

CVE-2007-0844

The authviakey function in pamssh.c in pamssh before 1.92, when the allowblankpassphrase option is disabled, allows remote attackers to bypass authentication restrictions and use private encryption keys requiring a blank passphrase by entering a non-blank passphrase...

pam_ssh allow_blank_passphrase protection bypass

The allowblankpassphrase option was defeatable by entering a random but non-blank passphrase...

ADVISORY FOR IOPUS SECURE EMAIL ATTACHMENTS

ADVISORY FOR IOPUS SECURE EMAIL ATTACHMENTS Affected : iOpus Secure Email Attachments Link : http://www.iopus.com/freeware/secure2Demail/ Type : File Encryption Tool Problem : Passphrase guessing, Passphrase Issue Date : 2006-04-22 Author : NtWaK0, Noph0bia @ www.SafeHack.com From iopus web site...

CVE-2005-4755

The CVE-2005-4755 issue affects BEA WebLogic Server and WebLogic Express 8.1 SP3 and earlier, where the SSL private key passphrase (CustomTrustKeyStorePassPhrase) is stored in cleartext in nodemanager.config, or rendered in cleartext during domain creation via the Configuration Wizard, visible on...

CVE-2005-4755

BEA WebLogic Server and WebLogic Express 8.1 SP3 and earlier 1 stores the private key passphrase CustomTrustKeyStorePassPhrase in cleartext in nodemanager.config; or, during domain creation with the Configuration Wizard, renders an SSL private key passphrase in cleartext 2 on a terminal or 3 in a...

CVE-2005-4755: Undefined Security Weakness

BEA WebLogic Server and WebLogic Express 8.1 SP3 and earlier 1 stores the private key passphrase CustomTrustKeyStorePassPhrase in cleartext in nodemanager.config; or, during domain creation with the Configuration Wizard, renders an SSL private key passphrase in cleartext 2 on a terminal or 3 in a...

CVE-2005-4755

BEA WebLogic Server and WebLogic Express 8.1 SP3 and earlier 1 stores the private key passphrase CustomTrustKeyStorePassPhrase in cleartext in nodemanager.config; or, during domain creation with the Configuration Wizard, renders an SSL private key passphrase in cleartext 2 on a terminal or 3 in a...

CVE-2004-2397

The web-based Management Console in Blue Coat Security Gateway OS 3.0 through 3.1.3.13 and 3.2.1, when importing a private key, stores the key and its passphrase in plaintext in a log file, which allows attackers to steal digital certificates...

FreeBSD : gnupg -- OpenPGP symmetric encryption vulnerability (8375a73f-01bf-11da-bc08-0001020eed82)

Serge Mister and Robert Zuccherato reports that the OpenPGP protocol is vulnerable to a cryptographic attack when using symmetric encryption in an automated way. David Shaw reports about the impact : This attack, while very significant from a cryptographic point of view, is not generally effectiv...

CVE-2002-1977

CVE-2002-1977 affects Network Associates PGP 7.0.4 and 7.1. The issue is that the Passphrase Cache timeout is not applied as configured, potentially allowing local attackers to open encrypted files without a passphrase. This is a technical description based on Red Hat/NVD entries; no exploitation...

CVE-2002-1977

Network Associates PGP 7.0.4 and 7.1 does not time out according to the value set in the "Passphrase Cache" option, which could allow attackers to open encrypted files without providing a passphrase...

CVE-2002-1977: Undefined Security Weakness

Network Associates PGP 7.0.4 and 7.1 does not time out according to the value set in the "Passphrase Cache" option, which could allow attackers to open encrypted files without providing a passphrase...

CVE-2001-1483

CVE-2001-1483 affects OPIE (One-Time Passwords In Everything) versions 2.32 and 2.4. It permits remote attackers to determine whether a user account exists by observing how passphrases are printed: random passphrases if the account does not exist, static passphrases if it does. This is an informa...

CVE-2002-1284

Technical details, affected versions, and exact impact are not publicly provided in the available documents. Monitor for updates from official advisories to obtain concrete information.

CVE-2002-1284

The wizard in KGPG 0.6 through 0.8.2 does not properly provide the passphrase to gpg when creating new keys, which causes secret keys to be created with an empty passphrase and allows local attackers to steal the keys if they can be read...