PT-2013-90: Unauthorized Access in Emerson DeltaV

The specialists of the Positive Research center have detected an Unauthorized Access vulnerability in Emerson DeltaV. A Local attacker with user privileges can read configuration file to obtain sensitive information. User name and password for the DeltaVAdmin account are stored in plaintext. How ...

Update: Full Disclosure - WD My Net N600, N750, N900, N900C - Plain Text Disclosure of Admin Credentials

Vulnerable Systems: Western Digital My Net Series Wireless Routers: N600 Firmware 1.03.12 N600 Firmware 1.04.16 N750 Firmware 1.03.12 N750 Firmware 1.04.16 N900 Firmware 1.05.12 N900 Firmware 1.06.18 N900 Firmware 1.06.28 N900C Firmware 1.05.12 N900C Firmware 1.06.18 N900C Firmware 1.06.28 CVE...

Western Digital My Net Wireless Routers - Password Disclosure

Western Digital My Net Wireless Routers - Password Disclosure Vulnerable Systems: Western Digital My Net Series Wireless Routers: N600 Firmware 1.03.12 N600 Firmware 1.04.16 N750 Firmware 1.03.12 N750 Firmware 1.04.16 N900 Firmware 1.05.12 N900 Firmware 1.06.18 N900 Firmware 1.06.28 N900C Firmwar...

Western Digital My Net Wireless Routers - Password Disclosure

Vulnerable Systems: Western Digital My Net Series Wireless Routers: N600 Firmware 1.03.12 N600 Firmware 1.04.16 N750 Firmware 1.03.12 N750 Firmware 1.04.16 N900 Firmware 1.05.12 N900 Firmware 1.06.18 N900 Firmware 1.06.28 N900C Firmware 1.05.12 N900C Firmware 1.06.18 N900C Firmware 1.06.28 CVE...

Tridium Niagara AX Web Server Multiple Vulnerabilities

Binary data scadatridiumniagarapatch18dec2012.nbin...

VMware的EMC Avamar Client "root"密码泄露安全漏洞

CVE ID: CVE-2012-4610 EMC Avamar是数据去重备份和恢复的解决方案。 EMC Avamar Client for VMware v6.1将根密码以明文形式保存代理客户端，具有代理客户端和Avamar服务器访问权限的恶意用户可利用此漏洞获取访问Avamar服务器的提升权限。 0 EMC Avamar 6.x 厂商补丁： EMC --- EMC已经为此发布了一个安全公告（40843）以及相应补丁，建议您尽快应用更新并更改现有的Avamar Server根用户密码: 40843：EMC Avamar Client for VMware 6.1.100-402...

Altiris Deployment Solution Server < 6.9.355 Password Disclosure (SYM08-020) (deprecated)

Binary data 4772.prm...

PHPMyAdmin明文密码存储漏洞

BUGTRAQ: 7965 phpMyAdmin以明文格式存储密码，本地攻击者可以用这个漏洞获得Cookie文件中的密码信息，控制phpMyAdmin应用系统。 phpMyAdmin没有使用任何类似BASE64/RadiX64的编码形式，只是简单的把用户数据如用户名和密码以明文方式存储在Cookie文件中，如： pmacookieusername=UserName; lang=language-iso-8859-1; pmacookiepassword=your password 任意本地用户或者远程用户通过跨站脚本执行攻击，可以Cookie信息获得敏感用户信息，从而控制系统。...

Code injection

Apple Mail.app 3.5 on Mac OS X, when "Store draft messages on the server" is enabled, stores draft copies of S/MIME email in plaintext on the email server, which allows server owners and remote man-in-the-middle attackers to read sensitive mail...

CVE-2008-2279

Freelance Auction Script 1.0 stores user passwords in plaintext in the tblusers table, which allows attackers to gain privileges by reading the table...

CVE-2007-2883

Credant Mobile Guardian Shield (CMG) for Windows prior to 5.2.1 SP1 stores account names and passwords in memory in plaintext, permitting local attackers to recover credentials by reading the paging file or from a dumped memory image. The CERT note confirms credentials may be written to disk due ...

CVE-2006-5956

XLineSoft PHPRunner 3.1 stores the 1 database server name, 2 database names, 3 usernames, and 4 passwords in plaintext in %WINDIR%\PHPRunner.ini, which allows local users to obtain sensitive information by reading the file...

CVE-2006-5956

XLineSoft PHPRunner 3.1 stores the (1) database server name, (2) database names, (3) usernames, and (4) passwords in plaintext in %WINDIR%\PHPRunner.ini. This plaintext credential exposure allows local users to obtain sensitive information by reading the file. Root cause is insecure storage of cr...

CVE-2006-4615

Shape Services IM+ Mobile Instant Messenger for Pocket PC 3.10 stores usernames and passwords in plaintext in %PROGRAMFILES%\IMPlus\implus.cfg, which allows local users to obtain sensitive information by reading the file...

CVE-2006-3663

Finjan Vital Security Appliance 5100/8100 NG 8.3.5 stores passwords in plaintext in a backup file, which allows local users to gain privileges. NOTE: the vendor has notified CVE that this issue was fixed in 8.3.6...

CVE-2006-0261

Multiple unspecified vulnerabilities in Oracle Database server 8.1.7.4, 9.0.1.5, 9.2.0.7, and 10.1.0.5 have unspecified impact and attack vectors, as identified by Oracle Vuln 1 DB07 in the Dictionary component and 2 DB14 in the Oracle Label Security component. NOTE: Oracle has not disputed...

CVE-2006-0261

Multiple unspecified vulnerabilities in Oracle Database server 8.1.7.4, 9.0.1.5, 9.2.0.7, and 10.1.0.5 have unspecified impact and attack vectors, as identified by Oracle Vuln 1 DB07 in the Dictionary component and 2 DB14 in the Oracle Label Security component. NOTE: Oracle has not disputed...

Authentication flaw

Kolab Server 2.0.1, 2.0.2 and development versions pre-2.1-20051215 and earlier, when authenticating users via secure SMTP, stores authentication credentials in plaintext in the postfix.log file, which allows local users to gain privileges...

CVE-2005-4589

CVE-2005-4589 affects Spb Kiosk Engine 1.0.0.1, where the administrator passcode is stored in plaintext in the registry. The root cause is insecure storage of credentials in the registry, enabling local users to obtain the passcode. The NVD entry notes a LOW base score (CVSS2: AV:L/AC:L/Au:N/C:P/...

CVE-2003-1276

Netfone.exe of NetTelephone 3.5.6 is vulnerable due to weak encryption for user PINs and plaintext storage of account numbers in the registry (HKCU\Software\MediaRing.com\SDK\NetTelephone\settings). Local users could potentially gain unauthorized access to NetTelephone accounts. The connected doc...