kayakoBad.txt

GulfTech Security Research July 30th, 2005 Vendor : Kayako Web Solutions URL : http://www.kayako.com/ Version : Kayako liveResponse v2.x Risk : Multiple Vulnerabilities Description: Kayako liveResponse is a web based application aimed at providing live support for websites and businesses. There a...

CVE-2005-2444

The CVE-2005-2444 issue affects Trillian Pro 3.1 build 121. When checking Yahoo mail, the application stores the Yahoo password in plaintext in a world-readable file and does not delete the file after login. This creates a local-privilege risk where users on the same machine can read sensitive cr...

Kayako liveResponse Multiple Vulnerabilities

GulfTech Security Research July 30th, 2005 Vendor : Kayako Web Solutions URL : http://www.kayako.com/ Version : Kayako liveResponse v2.x Risk : Multiple Vulnerabilities Description: Kayako liveResponse is a web based application aimed at providing live support for websites and businesses. There a...

ECIrouter.txt

Title: ECI router verification bypass and DoS Date: 24/07/2005 Impact: Log in verification bypass Vendors Status: Not contacted they were mean to me Overview: The B-FOCuS Router 312+ provides users with a reliable and secured ADSL2+ connection to the Internet. The 312+ has a single Ethernet port...

Name Oracle JDeveloper passes Plaintext Password

Name Oracle JDeveloper passes Plaintext Password Systems Affected Oracle JDeveloper 9.0.4, 9.0.5, 10.1.2 Severity Low Risk Category Information disclosure of Passwords Vendor URL http://www.oracle.com Author Alexander Kornbrust ak at red-database-security.com Date 12 July 2005 V 1.00 Advisory...

CVE-2005-2227

Softiacom wMailserver 1.0 stores passwords in plaintext in the Darsite\MAILSRV\Admin key, which allows local users to gain administrator privileges...

CVE-2002-1800

The CVE-2002-1800 issue affects phpRank version 1.8, where the administrative password is stored in plaintext on the server and in the ap cookie. This design allows remote attackers to retrieve the administrative password, compromising admin access. The Red Hat entry and PT-7500-series advisory c...

CVE-2001-1481

Xitami 2.4–2.5 b4 stores the Administrator password in plaintext in the default.aut file, whose permissions are world-readable, enabling remote attackers to gain privileges. Affected versions: Xitami 2.4–2.5 b4. Root cause: plaintext password storage with insecure default file permissions. Impact...

CVE-2001-1481

Xitami 2.4 through 2.5 b4 stores the Administrator password in plaintext in the default.aut file, whose default permissions are world-readable, which allows remote attackers to gain privileges...

HTTP Plaintext Password Authentication

Binary data 3018.prm...

security flaw

sysreport 1.3.15 and earlier includes contents of the up2date file in a report, which leaks the password for a proxy server in plaintext and allows local users to gain privileges...

CVE-2005-1617

Willings WebCam and WebCam Lite 2.8 and earlier stores the password in memory in plaintext, which allows local users to gain sensitive information...

CVE-2005-1617

Willings WebCam and WebCam Lite 2.8 and earlier stores the password in memory in plaintext, which allows local users to gain sensitive information...

CVE-2005-1617

The CVE-2005-1617 entry concerns Willings WebCam and WebCam Lite up to version 2.8, where passwords are stored in memory in plaintext. This is the underlying vulnerability: a local-access risk that could allow a user with access to the host to read the password from memory. The available document...

CVE-2005-1505

The CVE describes a vulnerability in Mail.app 2.0 on Mac OS X 10.4 during IMAP account configuration: the new account wizard does not prompt for SSL until after the password is sent, allowing plaintext leakage. Affected component is the IMAP credential flow in Mail.app 2.0; root cause is delayed ...

CVE-2005-1505

The new account wizard in Mail.app 2.0 in Mac OS 10.4, when configuring an IMAP mail account and checking the credentials, does not prompt the user to use SSL until after the password has already been sent, which causes the password to be sent in plaintext...

CVE-2005-1505

The new account wizard in Mail.app 2.0 in Mac OS 10.4, when configuring an IMAP mail account and checking the credentials, does not prompt the user to use SSL until after the password has already been sent, which causes the password to be sent in plaintext...

CVE-2005-1418

NetLeaf Limited NotJustBrowsing 1.0.3 stores the View Lock Password in plaintext in the notjustbrowsing.prf file, which allows local users to gain privileges...

CVE-2005-1411

CVE-2005-1411 affects Cybration ICUII 7.0, where passwords are stored in plaintext in the world-readable icuii.ini file. This local-privilege scenario arises from the insecure storage, enabling local users to gain privileges by reading the file. The available sources describe the vulnerability an...

CVE-2005-1418

NetLeaf Limited NotJustBrowsing 1.0.3 stores the View Lock Password in plaintext in the notjustbrowsing.prf file, which allows local users to gain privileges...