CVE-2001-1253

Alexis 2.0 and 2.1 in COM2001 InternetPBX stores voicemail passwords in plain text in the com2001.ini file, which could allow local users to make long distance calls as other users...

Microsoft Windows 2000 Telnet server vulnerability

RAZOR Advisory: Range checking fault condition in Microsoft Windows 2000 Telnet server Issue Date: June 8, 2001 Contact: Michal Zalewski [email protected] Topic: Range checking fault condition is present in telnet server shipped with Microsoft Windows 2000. Affected Systems: Tested on...

Oracle's ADI 7.1.1.10.1 Major security hole

The version of ADI Application Desktop Integrator 7.1.1.10.1 which was recently shipped with Oracle's Financial Applications version 11.5.3 contains a major security breach. Whenever the software is launched, it creates a file called dbg.txt on the local hard drive on the system which contains in...

Broker FTP unauthorized directory browsing and plain text password storing

403-SECURITY advisory Issue: Broker FTP unauthorized directory browsing and plain text password storing Author: Astral [email protected] Discovered: 07.11.2000 Published: 22.11.2000 Version: 4.7.5.0 others are probably vulnerable too Vendor: TransSoft I. Description: Broker FTP is powerful...

Дырки в Netscape Certificate Management/Netscape Directopy Server

Обратный путь в директориях позволяет обратиться к любому файлу. При этом пароль администрирования ххранится в файле открытым текстом...

Дырка в Course Info

Пароль администрирования хранится в ресстре открытым текстом...

ralfchat12.txt

RALF'S CHAT V.12 - http://www.ralfchat.de Ralf's Chat is a free cgi based chat program. But Ralf's Chat has some awful bugs in it. I played myself with the CGI and discovered that the masterpassword is set by a default password called: mpw So, if someone else who carries on this chatedited the...

CVE-2000-0008

FTPPro allows local users to read sensitive information, which is stored in plain text...

CVE-2000-0008

The CVE-2000-0008 issue concerns FTPPro, where local users can read sensitive data stored in plain text. Connected sources (PT-1999-1817) name FTPPro and describe the vulnerability as allowing local access to plaintext information, but do not specify affected versions or a repair/fix. Other conne...

CVE-2000-0008

FTPPro allows local users to read sensitive information, which is stored in plain text...

PT-1999-1817 · Ftppro · Ftppro

Name of the Vulnerable Software and Affected Versions: FTPPro affected versions not specified Description: The issue allows local users to read sensitive information stored in plain text. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

ftp-spoof.pl

This is a simple tcp server that listens on port 21 unless another is specified. The possible uses of this are; Ftp has no encryption for passwords and they are sent in plain text under the right conditions. Most ftp programs have a text file called .ini which will store the info like site-name,...

realserver.passwd.txt

Date: Wed, 14 Apr 1999 10:45:50 +0200 From: Francisco M. Marzoa Alonso To: [email protected] Subject: Real Media Server stores passwords in plain text My real media server information: fmmarzoa@alexander:/usr/local/rserver/Bin rmserver -version Creating Server Space... Starting RealServer 6.0...

cheyenne.InocuLAN.passwd.txt

Date: Fri, 5 Mar 1999 12:19:59 -0800 From: JEK To: [email protected] Subject: Cheyenne InocuLAN for Exchange plain text password still there This dates back to Ron Watkins' post on 12/16/98 regarding the plain text account name/password left in the exchverify.log file by the...