CVE-2002-2143

The admin.html file in MySimple News 1.0 stores its administrative password in plaintext, which allows remote attackers to gain unauthorized access to the web server by viewing the source of admin.html...

CVE-2002-0933

CVE-2002-0933 affects Datalex PLC BookIt! Consumer prior to version 2.2. The issue stems from usernames/passwords being stored in plaintext in a cookie, enabling remote attackers to gain privileges through cross-site scripting or sniffing. The NVD metrics indicate partial impact to confidentialit...

CVE-2001-1404

Bugzilla before 2.14 stores user passwords in plaintext and sends password requests in an email message, which could allow attackers to gain privileges...

CVE-2002-1449

eUpload 1.0 stores the password.txt password file in plaintext under the web document root, which allows remote attackers to overwrite arbitrary files by reading password.txt...

CVE-2002-0544

Aprelium Abyss Web Server abyssws before 1.0.3 stores the administrative console password in plaintext in the abyss.conf file, which allows local users with access to the file to gain privileges...

CVE-2002-0264

PowerFTP Personal FTP Server 2.03 through 2.10 stores sensitive account information in plaintext in the ftpserver.ini file, which allows attackers with access to the file to gain privileges...

CVE-2002-0345

Symantec Ghost 7.0 stores usernames and passwords in plaintext in the NGServer\params registry key, which could allow an attacker to gain privileges...

CVE-2002-0214

Compaq Intel PRO/Wireless 2011B LAN USB Device Driver 1.5.16.0 through 1.5.18.0 stores the 128-bit WEP Wired Equivalent Privacy key in plaintext in a registry key with weak permissions, which allows local users to decrypt network traffic by reading the WEP key from the registry key...

CVE-2002-0264

The CVE-2002-0264 entry concerns PowerFTP Personal FTP Server (versions 2.03–2.10). The vulnerability results from plaintext storage of sensitive account information in the ftpserver.ini configuration file, allowing attackers who can access that file to gain privileges. The impact is confidential...

CVE-2002-0343

CVE-2002-0343 affects Hotline Client 1.8.5, where passwords and other sensitive user data are stored in plaintext in the bookmarks file. The underlying issue is plaintext storage accessible to local users, enabling privilege escalation by extracting passwords from the bookmarks file. Impact is de...

CVE-2002-0110

Nevrona Designs MiraMail 1.04 and earlier stores authentication information such as POP usernames and passwords in plaintext in a .ini file, which allows an attacker to gain privileges by reading the passwords from the file...

CVE-2002-0110

Nevrona Designs MiraMail (Windows) up to version 1.04 stores user credentials (POP usernames and passwords) in plaintext in an .ini file. The underlying issue is unencrypted storage of authentication data, allowing anyone with file access to read passwords and potentially gain privileges. Public ...

CVE-2001-1111

CVE-2001-1111 concerns EFTP 2.0.7.337, where user passwords are stored in plaintext in the file eftp2users.dat. The issue is a plaintext credential exposure, with the NVD vector indicating local access, low complexity, and no authentication required to obtain partial confidentiality, partial inte...

PT-2001-2571 · Imatix · Xitami

Name of the Vulnerable Software and Affected Versions: Xitami versions 2.4 through 2.5 b4 Description: The issue allows remote attackers to gain privileges due to the storage of the Administrator password in plaintext in the default.aut file. The default permissions of this file are world-readabl...

Air Messenger LAN Server (AMLServer) stores usernames and passwords in plaintext

Overview Air Messenger LAN Server AMLServer stores usernames and passwords in plaintext. Description AMLServer for windows is a paging gateway that allows users on a TCP/IP LAN to communicate with mobile devices such as phones and pagers. Access to AMLServer's services is protected by a user...

CVE-2001-0786

Internet Software Solutions Air Messenger LAN Server AMLServer 3.4.2 stores user passwords in plaintext in the pUser.Dat file...

CVE-2001-0768

GuildFTPd 0.9.7 stores user names and passwords in plaintext in the default.usr file, allowing local users to gain privileges as other FTP users by reading the file. This is a local privilege escalation through credential disclosure; no exploit specifics are provided in the available documents. R...

Cisco PIX Firewall Manager stores enable password in plain text

Overview A vulnerability exists in the way the Cisco Pix Firewall Manager stores authentication credentials which could allow local attackers to have read access to the enable password for the Cisco Pix Firewall. Description The PIX Firewall Manager PFM is a software package designed to allow...

CVE-1999-1369

Real Media RealServer rmserver 6.0.3.353 stores a password in plaintext in the world-readable rmserver.cfg file, which allows local users to gain privileges...

CVE-1999-1236

The CVE-1999-1236 entry concerns Internet Anywhere Mail Server 2.3.1 where passwords are stored in plaintext in the msgboxes.dbf file. Root cause: insecure plaintext storage of credentials within a local file, enabling local users to extract passwords and potentially gain privileges. The availabl...