CVE-2001-1098

The CVE-2001-1098 entry applies to Cisco PIX Firewall Manager (PFM) 4.3(2)g. The vulnerability arises because the enable password is stored/logged in plaintext in the pfm.log, potentially allowing local users to read and obtain the enable password. Affected behavior: local access to the password ...

CVE-2001-1098: Undefined Security Weakness

Cisco PIX firewall manager PFM 4.32g logs the enable password in plaintext in the pfm.log file, which could allow local users to obtain the password by reading the file...

Older Versions of Cisco PIX Firewall Manager permits retrieval of files

Overview A vulnerability in versions of the Cisco PIX Firewall Manager PFM in use circa September 1998 allows intruders to retrieve files from the host running PFM. Description A vulnerability in the Cisco PIx FIrewall manager allows an intruder to retrieve files from the host running PFM. In...

Cisco PIX Firewall Manager stores enable password in plain text

Overview A vulnerability exists in the way the Cisco Pix Firewall Manager stores authentication credentials which could allow local attackers to have read access to the enable password for the Cisco Pix Firewall. Description The PIX Firewall Manager PFM is a software package designed to allow...

CVE-1999-0158: Undefined Security Weakness

Cisco PIX firewall manager PFM on Windows NT allows attackers to connect to port 8080 on the PFM server and retrieve any file whose name and location is known...