Lucene search
+L

303 matches found

NVD
NVD
•added 2005/12/07 11:03 a.m.•28 views

CVE-2005-4066

Total Commander 6.53 uses weak encryption to store FTP usernames and passwords in WCXFTP.INI, which allows local users to decrypt the passwords and gain access to FTP servers, as possibly demonstrated by the W32.Gudeb worm...

4.9CVSS6.5AI score0.00229EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/08/16 12:00 a.m.•5 views

CVE-2003-1226: Undefined Security Weakness

BEA WebLogic Server and Express 7.0 and 7.0.0.1 stores certain secrets concerning password encryption insecurely in config.xml, filerealm.properties, and weblogic-rar.xml, which allows local users to learn those secrets and decrypt passwords...

2.1CVSS5.8AI score0.00208EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/06/28 12:00 a.m.•4 views

CVE-2002-1872: Inadequate Encryption Strength

Microsoft SQL Server 6.0 through 2000, with SQL Authentication enabled, uses weak password encryption XOR, which allows remote attackers to sniff and decrypt the password...

7.5CVSS5.9AI score0.06978EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/06/21 12:00 a.m.•3 views

CVE-2002-1682: Inadequate Encryption Strength

NewsReactor 1.0 uses a weak encryption scheme, which could allow local users to decrypt the passwords and gain access to other users' newsgroup accounts...

5.5CVSS5.8AI score0.00193EPSS
SaveExploits1References2
Packet Storm
Packet Storm
•added 2005/06/18 12:00 a.m.•36 views

UPBdecrypt.pl.txt

!/usr/bin/perl Passwords Decrypter for UPB $optf" || die "- Unable to open $optf: $!"; print RESULTS "Results for $opth\n","="x40,"\n\n"; for$in=0;$in/ && print RESULTS "Username: $1\n"; $page$in=m/^$1.?/ && print RESULTS "Crypted P...

7.4AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/05/27 12:00 a.m.•5 views

CVE-2004-2134: Undefined Security Weakness

Oracle toplink mapping workBench uses a weak encryption algorithm for passwords, which allows local users to decrypt the passwords...

4.6CVSS5.8AI score0.01575EPSS
SaveExploits2References1
NVD
NVD
•added 2005/01/10 5:00 a.m.•27 views

CVE-2004-1022

Kerio Winroute Firewall before 6.0.7, ServerFirewall before 1.0.1, and MailServer before 6.0.5 use symmetric encryption for user passwords, which allows attackers to decrypt the user database and obtain the passwords by extracting the secret key from within the software...

2.1CVSS6.5AI score0.00206EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2004/12/15 5:00 a.m.•37 views

CVE-2004-1022

Kerio Winroute Firewall before 6.0.7, ServerFirewall before 1.0.1, and MailServer before 6.0.5 use symmetric encryption for user passwords, which allows attackers to decrypt the user database and obtain the passwords by extracting the secret key from within the software...

6.5AI score0.00206EPSS
SaveExploits0References2
CVE
CVE
•added 2004/12/15 5:00 a.m.•64 views

CVE-2004-1022

Kerio products Kerio WinRoute Firewall (before 6.0.7), ServerFirewall (before 1.0.1), and MailServer (before 6.0.5) store passwords using a symmetric encryption scheme. The vulnerability arises because the secret key is extractable from the software, enabling an attacker to decrypt the user datab...

2.1CVSS7AI score0.00206EPSS
SaveExploits0References2Affected Software3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2004/12/15 12:00 a.m.•4 views

CVE-2004-1022: Undefined Security Weakness

Kerio Winroute Firewall before 6.0.7, ServerFirewall before 1.0.1, and MailServer before 6.0.5 use symmetric encryption for user passwords, which allows attackers to decrypt the user database and obtain the passwords by extracting the secret key from within the software...

2.1CVSS5.8AI score0.00206EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2004/08/20 12:00 a.m.•25 views

Samba < 2.2.7 Unicode Encrypted Password Decryption Overflow

Binary data 1343.prm...

10CVSS7.3AI score0.51914EPSS
SaveExploits2References2
securityvulns
securityvulns
•added 2004/08/19 12:00 a.m.•42 views

IpSwitch IMail Server &lt;= ver 8.1 User Password Decryption

Hi fellaz, IpSwitch IMail Server version up to 8.1 uses weak encryption algorithm to encrypt its user passwords. Have a look at attached proof of concept tool, which will decrypt user password from local machine instantly. --- G:xploitsimaildecrypt G:xploitsimaildecryptimailpwdump -d --= IpSwitch...

1.1AI score
SaveExploits0
zdt
zdt
•added 2004/08/18 12:00 a.m.•40 views

IPSwitch IMail Server <= 8.1 Local Password Decryption Utility

Exploit for unknown platform in category local exploits ============================================================== IPSwitch IMail Server IpSwitch IMail Server uses weak encryption algorithm to encrypt its user passwords. It uses polyalphabetic Vegenere cipher to encrypt its user passwords. Th...

6.8AI score
SaveExploits0
exploitpack
exploitpack
•added 2004/08/18 12:00 a.m.•22 views

IPSwitch IMail Server 8.1 - Local Password Decryption Utility

IPSwitch IMail Server 8.1 - Local Password Decryption Utility / IpSwitch IMail Server IpSwitch IMail Server uses weak encryption algorithm to encrypt its user passwords. It uses polyalphabetic Vegenere cipher to encrypt its user passwords. This encryption scheme is relatively easy to break. In...

0.2AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2004/08/18 12:00 a.m.•31 views

Imailpwdump.cpp

/ IpSwitch IMail Server IpSwitch IMail Server uses weak encryption algorithm to encrypt its user passwords. It uses polyalphabetic Vegenere cipher to encrypt its user passwords. This encryption scheme is relatively easy to break. In order to decrypt user password we need a key. IMail uses usernam...

7.4AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2004/08/18 12:00 a.m.•62 views

IPSwitch IMail Server 8.1 - Local Password Decryption Utility

/ IpSwitch IMail Server IpSwitch IMail Server uses weak encryption algorithm to encrypt its user passwords. It uses polyalphabetic Vegenere cipher to encrypt its user passwords. This encryption scheme is relatively easy to break. In order to decrypt user password we need a key. IMail uses usernam...

7.2CVSS5.8AI score0.01404EPSS
SaveExploits3
NVD
NVD
•added 2004/01/28 5:00 a.m.•28 views

CVE-2004-2134

Oracle toplink mapping workBench uses a weak encryption algorithm for passwords, which allows local users to decrypt the passwords...

4.6CVSS6AI score0.01575EPSS
SaveExploits2References5
NVD
NVD
•added 2003/10/20 4:00 a.m.•26 views

CVE-2003-0745

SNMPc 6.0.8 and earlier performs authentication to the server on the client side, which allows remote attackers to gain privileges by decrypting the password that is returned by the server...

10CVSS7.3AI score0.02458EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2003/09/06 4:00 a.m.•36 views

CVE-2003-0745

SNMPc 6.0.8 and earlier performs authentication to the server on the client side, which allows remote attackers to gain privileges by decrypting the password that is returned by the server...

7.3AI score0.02458EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2003/09/06 12:00 a.m.•8 views

CVE-2003-0745: Undefined Security Weakness

SNMPc 6.0.8 and earlier performs authentication to the server on the client side, which allows remote attackers to gain privileges by decrypting the password that is returned by the server...

10CVSS5.9AI score0.02458EPSS
SaveExploits0References1
Rows per page
Query Builder