906 matches found
CVE-2005-3203
The manual installation of Oracle HTML DB HTMLDB 1.3 through 1.3.6 stores the SYS password in install.lst in plaintext, which allows local users to gain privileges...
[Full-disclosure] Plaintext Password Vulnerabilitiy during Installation of Oracle HTMLDB
Plaintext Password Vulnerabilitiy during Installation of Oracle HTMLDB Name Cross-Site-Scripting Vulnerabilities in Oracle XMLDB Systems Affected Oracle HTMLDB Severity Low Risk Category Plaintext Password of SYS is logged during Installation of HTMLDB Vendor URL http://www.oracle.com This adviso...
CVE-2005-3036
CVE-2005-3036 affects File Transfer Anywhere 3.01, where a sensitive password is stored in plaintext in the PASS value of the program’s registry key. The root cause is plaintext credential storage in the registry, enabling local users to gain privileges. Impact: local privilege escalation as desc...
CVE-2005-2866
Mercora IMRadio 4.0.0.0 stores usernames and passwords in plaintext in the MercoraClient\Profiles registry key, which allows local users to gain privileges...
CVE-2005-2664
Whisper 32 1.16, and possibly earlier versions, stores passwords in plaintext in memory, which allows local users to obtain the password using a debugger or another mechanism to read process memory...
CVE-2005-2620
grpWise.exe for Novell GroupWise client 5.5 through 6.5.2 stores the password in plaintext in memory, which allows attackers to obtain the password using a debugger or another mechanism to read process memory...
CVE-2005-2620
The CVE affects Novell GroupWise Windows clients (5.x–6.5.2) where the grpWise.exe process stores passwords in plaintext in memory. This allows a local attacker with access (e.g., via memory dump/read mechanisms or a debugger) to recover credentials. The issue is a memory-credential caching probl...
kayakoBad.txt
GulfTech Security Research July 30th, 2005 Vendor : Kayako Web Solutions URL : http://www.kayako.com/ Version : Kayako liveResponse v2.x Risk : Multiple Vulnerabilities Description: Kayako liveResponse is a web based application aimed at providing live support for websites and businesses. There a...
CVE-2005-2444
The CVE-2005-2444 issue affects Trillian Pro 3.1 build 121. When checking Yahoo mail, the application stores the Yahoo password in plaintext in a world-readable file and does not delete the file after login. This creates a local-privilege risk where users on the same machine can read sensitive cr...
Kayako liveResponse Multiple Vulnerabilities
GulfTech Security Research July 30th, 2005 Vendor : Kayako Web Solutions URL : http://www.kayako.com/ Version : Kayako liveResponse v2.x Risk : Multiple Vulnerabilities Description: Kayako liveResponse is a web based application aimed at providing live support for websites and businesses. There a...
ECIrouter.txt
Title: ECI router verification bypass and DoS Date: 24/07/2005 Impact: Log in verification bypass Vendors Status: Not contacted they were mean to me Overview: The B-FOCuS Router 312+ provides users with a reliable and secured ADSL2+ connection to the Internet. The 312+ has a single Ethernet port...
Name Oracle JDeveloper passes Plaintext Password
Name Oracle JDeveloper passes Plaintext Password Systems Affected Oracle JDeveloper 9.0.4, 9.0.5, 10.1.2 Severity Low Risk Category Information disclosure of Passwords Vendor URL http://www.oracle.com Author Alexander Kornbrust ak at red-database-security.com Date 12 July 2005 V 1.00 Advisory...
CVE-2005-2227
Softiacom wMailserver 1.0 stores passwords in plaintext in the Darsite\MAILSRV\Admin key, which allows local users to gain administrator privileges...
CVE-2002-1800
The CVE-2002-1800 issue affects phpRank version 1.8, where the administrative password is stored in plaintext on the server and in the ap cookie. This design allows remote attackers to retrieve the administrative password, compromising admin access. The Red Hat entry and PT-7500-series advisory c...
CVE-2001-1481
Xitami 2.4–2.5 b4 stores the Administrator password in plaintext in the default.aut file, whose permissions are world-readable, enabling remote attackers to gain privileges. Affected versions: Xitami 2.4–2.5 b4. Root cause: plaintext password storage with insecure default file permissions. Impact...
CVE-2001-1481
Xitami 2.4 through 2.5 b4 stores the Administrator password in plaintext in the default.aut file, whose default permissions are world-readable, which allows remote attackers to gain privileges...
HTTP Plaintext Password Authentication
Binary data 3018.prm...
security flaw
sysreport 1.3.15 and earlier includes contents of the up2date file in a report, which leaks the password for a proxy server in plaintext and allows local users to gain privileges...