CVE-2000-1076

Netscape iPlanet Certificate Management System 4.2 and Directory Server 4.12 stores the administrative password in plaintext, which could allow local and possibly remote attackers to gain administrative privileges on the server...

CVE-2000-1076

Netscape iPlanet Certificate Management System 4.2 and Directory Server 4.12 stores the administrative password in plaintext, which could allow local and possibly remote attackers to gain administrative privileges on the server...

CVE-2000-1076: Undefined Security Weakness

Netscape iPlanet Certificate Management System 4.2 and Directory Server 4.12 stores the administrative password in plaintext, which could allow local and possibly remote attackers to gain administrative privileges on the server...

CVE-2000-0777

CVE-2000-0777 concerns Microsoft Money: the password protection feature stores the password in plaintext, enabling local attackers with physical access to extract it. CVSSv2 base score 7.2 (HIGH) with LOCAL access, LOW attack complexity, and full impact on confidentiality, integrity, and availabi...

CVE-2000-0777: Undefined Security Weakness

The password protection feature of Microsoft Money can store the password in plaintext, which allows attackers with physical access to the system to obtain the password, aka the "Money Password" vulnerability...

CVE-2000-0402

CVE-2000-0402 concerns Information Disclosure in Microsoft SQL Server 7.0: the sa password is stored in plaintext in a log file (sqlsp.log) readable by any user. This vulnerability is described as the "SQL Server 7.0 Service Pack Password" issue. Public references in the provided documents point ...

CVE-2000-0402: Undefined Security Weakness

The Mixed Mode authentication capability in Microsoft SQL Server 7.0 stores the System Administrator sa account in plaintext in a log file which is readable by any user, aka the "SQL Server 7.0 Service Pack Password" vulnerability...

CVE-2000-0434

The CVE-2000-0434 issue concerns the Allmanage web site administration software. The underlying problem is that the administrative password is stored in plaintext in a file that could be accessed by remote attackers. This creates the potential for an attacker to obtain the password and gain unaut...

CVE-2000-0434

The administrative password for the Allmanage web site administration software is stored in plaintext in a file which could be accessed by remote attackers...

CVE-2000-0434: Undefined Security Weakness

The administrative password for the Allmanage web site administration software is stored in plaintext in a file which could be accessed by remote attackers...

RedHat 6.2 - Piranha Virtual Server Package Plaintext Password

RedHat 6.2 - Piranha Virtual Server Package Plaintext Password source: https://www.securityfocus.com/bid/1367/info Password changes submitted to Red Hat Piranha via HTTP are insecurely passed as variables in a GET request. Unauthorized users could obtain the password by reading the httpd access l...

Shiva Access Manager 5.0.0 Plaintext LDAP root password.

In testing Intel's Shiva Access Manager RADIUS/Tacacs+ product, i recently came across an important security hole in the LDAP connectivity on the Solaris platform version of this product. When you configure the S.A.M. to store all of it's information in an LDAP directory, it asks that you give it...

CVE-2000-0402

The Mixed Mode authentication capability in Microsoft SQL Server 7.0 stores the System Administrator sa account in plaintext in a log file which is readable by any user, aka the "SQL Server 7.0 Service Pack Password" vulnerability...

CVE-1999-0364

CVE-1999-0364 affects Microsoft Access 97, where a database password is stored as plaintext in a foreign .mdb file, enabling access to data. The linked documents consistently describe plaintext password storage as the vulnerability; no patch or remediation details are provided in the sources. Imp...

CVE-1999-0862

The CVE-1999-0862 case relates to insecure directory permissions in the PostgreSQL RPM distribution, enabling local users to gain privileges by reading a plaintext password file. The PT-Security entry notes PostgreSQL (affected versions not specified) and identifies the root cause as insecure RPM...

CVE-1999-0364: Undefined Security Weakness

Microsoft Access 97 stores a database password as plaintext in a foreign mdb, allowing access to data...

CVE-1999-0862: Undefined Security Weakness

Insecure directory permissions in RPM distribution for PostgreSQL allows local users to gain privileges by reading a plaintext password file...

CVE-1999-0982

Summary: The Sun Web-Based Enterprise Management (WBEM) installation script stores a password in plaintext in a world-readable file. Affected software: Sun WBEM (WBEM). Root cause: installation script writes credentials to a world-readable file, enabling potential access by local users. Impact: C...

CVE-1999-0982: Undefined Security Weakness

The Sun Web-Based Enterprise Management WBEM installation script stores a password in plaintext in a world readable file...

Ipswitch IMail Server 7/8 - Weak Password Encryption

// source: https://www.securityfocus.com/bid/10956/info Ipswitch IMail is reported to use a weak encryption algorithm when obfuscating saved passwords. A local attacker who has the ability to read the encrypted passwords may easily derive the plaintext password if the username that is associated...