Low security hole affecting Mentor's ADSLFR4II router

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I've found a number of low risk issues with Mentor's ADSLFR4II router. I initially spoke to them on the 20th July, passing them full details of my findings on the 21st of July. I then emailed them again on the 4th of August asking for an update and...

Trillian Ver 3.1 saves password's in plain Text

Hi Everyone, I was playing around with Trillian Pro 3.1 Build 121 and noticed a very disturbing behavior when using it to check my yahoo mail. When you choose the option to check your yahoo email from Trillian The little connection ball - Check Yahoo Mail it creates a temp file in the Install...

GLSA-200507-13 : pam_ldap and nss_ldap: Plain text authentication leak

The remote host is affected by the vulnerability described in GLSA-200507-13 pamldap and nssldap: Plain text authentication leak Rob Holland of the Gentoo Security Audit Team discovered that pamldap and nssldap fail to use TLS for referred connections if they are referred to a master after...

Microsoft Color Management Module buffer overflow during profile tag validation

Overview Microsoft Color Management Module contains a flaw that may allow an attacker to execute arbitrary code. Description The Microsoft Color Management Module provides consistent color management operations between applications and devices, and transforms between colorspaces such as 'RGB' and...

[SA15932] Access Remote PC User Credentials Disclosure

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

CVE-2002-1892

Affected product: NETGEAR FVS318, firmware 1.1. Issue: configuration backups store the username and password in a readable format. Impact: local users can obtain sensitive credentials from the backup file (confidentiality partially affected). Root cause: credentials stored in readable text within...

Novell GroupWise Plain Text Password Vulnerability.

-------------------------------------------- Novell GroupWise Plain Text Password Vulnerability. -------------------------------------------- Overview: A Vulnerability exsists in the Novell GroupWise Client that will allow an attacker to identify the id and password of the users GroupWise email...

lpanelPlain.txt

Subject: Lpanel.NET's Lpanel all versions up to and including 1.59 is vulnerable to plain-text session credential leakage via script injection. Severity: High; Full access to all client functions can be obtained with little effort, putting entire installations of the software and its users at ris...

Microsoft Internet Explorer buffer overflow in PNG image rendering component

Overview A buffer overflow in the PNG image rendering component of Microsoft Internet Explorer IE may allow a remote attacker to execute code on a vulnerable system. Description The Portable Network Graphics PNG image format is used as an alternative to other image formats such as the Graphics...

Esqo advisory: GeoVision Digital Video Surveillance System - Multiple authentication issues

Esqo www.esqo.com Security Advisory Advisory Name: GeoVision Digital Video Surveillance System – Multiple authentication issues Release Date: 10-05-2005 Application: GeoVision Digital Video Surveillance System 6.04, 6.1 and 7.0 Platform: Microsoft Windows Severity: Sniffed credentials can be...

p2pShareSpy.txt

--------------------- Application: --------------------- P2P Share Spy 2.2 and probably prior versions --------------------- Introduction: --------------------- Vendor: Rebrand Software http://www.rebrandsoftware.com/ Vendor Description: P2P Share Spy can search the Internet/world for computers...

JVN#55023557 Buffalo router configuration management interface vulnerable to remote access and password leakage

Impact Configurations could be changed by the remote attacker. As the save configuration stores user's account and password information of ISPs in plain-text format, a remote attacker could steal such information and impersonate a user to gain illegal access. Solution Products Affected BUFFALO...

CVE-2002-1353

Affected software : LocalWEB2000 HTTP server 2.1.0. Vulnerability : Passwords are stored in plain text under the web document root in the file users.lst, enabling remote access to passwords via a direct request to users.lst. Impact : Confidentiality of passwords is partially compromised as inform...

CVE-2002-1353

LocalWEB2000 HTTP server 2.1.0 stores passwords in plain text under the web document root in users.lst, which allows remote attackers to obtain the passwords via a direct request to users.lst...

Microsoft Internet Explorer DHTML objects contain a race condition

Overview A race condition in the way that Internet Explorer handles DHTML objects may allow a remote attacker to execute arbitrary code on a vulnerable system. Description According to Microsoft:Dynamic HTML DHTML is built on an object model that extends the traditional static HTML document which...

Microsoft Internet Explorer URL validation routine contains a buffer overflow

Overview A vulnerability in Microsoft Internet Explorer could allow a remote attacker to execute arbitrary code on a vulnerable system. Description Microsoft Internet Explorer IE contains an unspecified vulnerability in the way that it handles certain URLs. The process that checks the URL contain...

Microsoft Internet Explorer Content Advisor contains a buffer overflow

Overview A buffer overflow in Microsoft Internet Explorer Content Advisor may allow a remote attacker to execute arbitrary code on a vulnerable system. Description The Content Advisor is used to control what content is viewable in Internet Explorer. A buffer overflow exists in the routines that...

CVE-2004-1758

BEA WebLogic Server/Express (versions 8.1 up to SP2, 7.0 up to SP4, 6.1 up to SP6) may store the database username and password for an untargeted JDBC connection pool in plaintext in config.xml, enabling local users to gain privileges. Root cause: credentials stored in plaintext within config.xml...

[SA14455] Einstein Sensitive Information Disclosure

---------------------------------------------------------------------- Monitor, Filter, and Manage Security Information - Filtering and Management of Secunia advisories - Overview, documentation, and detailed reports - Alerting via email and SMS Request Trial: https://ca.secunia.com/?f=l...

[SA14389] PeerFTP_5 User Credentials Disclosure

TITLE: PeerFTP5 User Credentials Disclosure SECUNIA ADVISORY ID: SA14389 VERIFY ADVISORY: http://secunia.com/advisories/14389/ CRITICAL: Less critical IMPACT: Exposure of sensitive information WHERE: Local system SOFTWARE: PeerFTP5 5.x http://secunia.com/product/4706/ DESCRIPTION: Kozan has...