CVE-2005-1617

The CVE-2005-1617 entry concerns Willings WebCam and WebCam Lite up to version 2.8, where passwords are stored in memory in plaintext. This is the underlying vulnerability: a local-access risk that could allow a user with access to the host to read the password from memory. The available document...

CVE-2005-1505

The CVE describes a vulnerability in Mail.app 2.0 on Mac OS X 10.4 during IMAP account configuration: the new account wizard does not prompt for SSL until after the password is sent, allowing plaintext leakage. Affected component is the IMAP credential flow in Mail.app 2.0; root cause is delayed ...

CVE-2005-1505

The new account wizard in Mail.app 2.0 in Mac OS 10.4, when configuring an IMAP mail account and checking the credentials, does not prompt the user to use SSL until after the password has already been sent, which causes the password to be sent in plaintext...

CVE-2005-1505

The new account wizard in Mail.app 2.0 in Mac OS 10.4, when configuring an IMAP mail account and checking the credentials, does not prompt the user to use SSL until after the password has already been sent, which causes the password to be sent in plaintext...

CVE-2005-1411

CVE-2005-1411 affects Cybration ICUII 7.0, where passwords are stored in plaintext in the world-readable icuii.ini file. This local-privilege scenario arises from the insecure storage, enabling local users to gain privileges by reading the file. The available sources describe the vulnerability an...

CVE-2005-1418

NetLeaf Limited NotJustBrowsing 1.0.3 stores the View Lock Password in plaintext in the notjustbrowsing.prf file, which allows local users to gain privileges...

CVE-2005-1418

NetLeaf Limited NotJustBrowsing 1.0.3 stores the View Lock Password in plaintext in the notjustbrowsing.prf file, which allows local users to gain privileges...

CVE-2005-1418

CVE-2005-1418 affects NetLeaf Limited NotJustBrowsing 1.0.3. The vulnerability arises because the View Lock Password is stored in plaintext in the notjustbrowsing.prf file, allowing local users to gain privileges. The NVD entry provides a base score of 4.6 (Medium) with local attack vector and lo...

CVE-2005-0498

Gigafast router aka CompUSA router allows remote attackers to gain sensitive information and bypass the login page via a direct request to backup.cfg, which reveals the administrator password in plaintext...

CVE-2005-0522

Chat Anywhere 2.72a stores sensitive information such as passwords in plaintext in the .INI file for a chatroom, which allows local users to gain privileges...

CVE-2005-1097

Rebrand P2P Share Spy 2.2 stores the user password in plaintext in the txtPassword value in the registry, which allows local users to gain privileges...

CVE-2005-1226

CVE-2005-1226 affects Coppermine Photo Gallery 1.3.2, where passwords are stored in plaintext. This enables remote attackers to obtain sensitive information and potentially compromise accounts. The NVD entry reports a CVSS2 base score of 7.5 (HIGH) with network access, low attack complexity, no a...

CVE-2001-1463

The remote administration client for RhinoSoft Serv-U 3.0 sends the user password in plaintext even when S/KEY One-Time Password OTP authentication is enabled, which allows remote attackers to sniff passwords...

CVE-2001-1463

The CVE-2001-1463 vulnerability affects RhinoSoft Serv-U 3.0: the remote administration client transmits the user password in plaintext even when S/KEY One-Time Password (OTP) is enabled, enabling an attacker to sniff credentials over the network. The issue is a plaintext password exposure in the...

CVE-2005-1097

CVE-2005-1097 concerns Rebrand P2P Share Spy 2.2, where the password is stored in plaintext in the registry (txtPassword), enabling local users to gain privileges. The connected records consistently describe the root cause as plaintext password storage in the registry and local privilege escalati...

CVE-2005-0619

The CVE-2005-0619 entry describes Einstein 1.0.1 storing usernames and passwords in plaintext in the Windows registry, enabling local privilege escalation. Affected component: registry-stored credentials within Einstein 1.0.1. Root cause: insecure plaintext storage of sensitive data in the regist...

CVE-2005-0604

CVE-2005-0604 affects lnss.exe in GFI Languard Network Security Scanner 5.0 . The vulnerability is that the program stores the username and password in memory in plaintext, which could allow local administrators to obtain domain administrator credentials. This is the stated impact in the records,...

CVE-2004-2578

phpGroupWare before 0.9.16.002 transmits the 1 header admin and 2 setup passwords in plaintext via cookies, which allows remote attackers to sniff passwords...

CVE-2004-0616

The BT Voyager 2000 Wireless ADSL Router has a default public SNMP community name, which allows remote attackers to obtain sensitive information such as the password, which is stored in plaintext...

cht-2004.txt

CHT Security Research Center-2004 http://www.CyberSpy.Org Turkey Software: Web Forums Server Web Site: http://www.minihttpserver.net Affected Versions: 1.6,2.0 Power Packcurrent Description: Web Forums Server is "all in one" Web Server for Microsoft Windows Operating Systems. Web Forums Server ha...