Security hole in MatrikzGB

Security hole in MatrikzGB Guestbook 15/8/2003 Vulnerable Versions: Version 2.0 and prior Version 3 not tested Summary: MatrikzGB was written by Thomas Hempel for www.onsite.org. A bug in index.php allows a user with a regular user account to give administrator rights to himself. Details: The bug...

DWebPro 3.4.1 - Http.ini Plaintext Password Storage

DWebPro 3.4.1 - Http.ini Plaintext Password Storage source: https://www.securityfocus.com/bid/8438/info A vulnerability has been reported to exist in the DWebPro web server software. This problem allows an attacker to view database authentication credentials by accessing a plain text file named...

DWebPro 3.4.1 - Http.ini Plaintext Password Storage

source: https://www.securityfocus.com/bid/8438/info A vulnerability has been reported to exist in the DWebPro web server software. This problem allows an attacker to view database authentication credentials by accessing a plain text file named 'http.ini'. An attacker will require read access to...

CVE-2003-0406

PalmVNC 1.40 and earlier stores passwords in plaintext in the PalmVNCDB, which is backed up to PCs that the Palm is synchronized with, which could allow attackers to gain privileges...

eLDAPo index.php Plaintext Password Disclosure

The remote host is hosting eLDAPo, a PHP-based CGI suite designed to perform LDAP queries. This application stores the passwords to the LDAP server in plaintext in its source file. An attacker can read the source code of index.php and use the information contained to gain credentials on a...

CVE-2003-0406

CVE-2003-0406 concerns PalmVNC (1.40 and earlier) where passwords are stored in plaintext in the PalmVNCDB. This database is backed up to PCs with which the Palm is synchronized, potentially allowing attackers with local access to gain privileges on the target. The available documents specify the...

CVE-2003-0414

The installation of Sun ONE Application Server 7.0 for Windows 2000/XP creates a statefile with world-readable permissions, which allows local users to gain privileges by reading a plaintext password in the statefile...

CVE-2003-0406

PalmVNC 1.40 and earlier stores passwords in plaintext in the PalmVNCDB, which is backed up to PCs that the Palm is synchronized with, which could allow attackers to gain privileges...

CVE-2003-0329

CesarFTP 0.99g stores user names and passwords in plaintext in the settings.ini file, which could allow local users to gain privileges...

Vulnerabilities In Pablo Software Solutions FTP Service 1.2

Plaintext Password Vulnerability ------------------------------------ User info is stored in users.dat in plaintext. If the anonymous account is present it is by default the entire FTP server can be compromised ftp://somewhere/program files/pablo's ftp service/users.dat Default Anonymous Account...

FTP Service 1.2 - Multiple Vulnerabilities

FTP Service 1.2 - Multiple Vulnerabilities FTP Service Multiple Vulnerabilities Vendor: Pablo Software Solutions Product: FTP Service Version: = 1.2 Website: http://www.pablovandermeer.nl/ftpservice.html BID: 7799 7801 Description: FTPService.exe is a service-version of Pablo's FTP Server. This...

Pablo Software Solutions FTP Service 1.2 - Plaintext Password

Pablo Software Solutions FTP Service 1.2 - Plaintext Password source: https://www.securityfocus.com/bid/7801/info It has been reported that Pablo FTP Service stores FTP User account passwords in plaintext format. As a result, these credentials could be exposed to other users. It should be noted...

IRCXPro Plaintext Passwords Local Disclosure

The remote web server is running IRCXPro. This software stores the list of user names and passwords in plaintext in \Program Files\IRCXPro\Settings.ini. An attacker with a full access to this host may use this flaw to gain the list of passwords of your users. C Tenable Network Security, Inc. Ref:...

FTP Service < 1.2 - Multiple Vulnerabilities

FTP Service Multiple Vulnerabilities Vendor: Pablo Software Solutions Product: FTP Service Version: = 1.2 Website: http://www.pablovandermeer.nl/ftpservice.html BID: 7799 7801 Description: FTPService.exe is a service-version of Pablo's FTP Server. This service enables you to have the FTP server...

Pablo Software Solutions FTP Service 1.2 - Plaintext Password

source: https://www.securityfocus.com/bid/7801/info It has been reported that Pablo FTP Service stores FTP User account passwords in plaintext format. As a result, these credentials could be exposed to other users. It should be noted that while this weakness has been reported to affect Pablo FTP...

PalmVNC 1.40 Insecure Records

Flurnet Security ---------------- Application: PalmVNC 1.40 Developers: Harkan Software http://www.harakan.btinternet.co.uk/PalmVNC/ Vladimir Minenko http://www.wind-networks.de/PalmVNC/ Scope: VNC passwords saved in plaintext with backup bit. Tested on: PalmVNC 1.40 older versions probably...

BlackMoon FTP Server blackmoon.mdb Plaintext Password Disclosure

BlackMoon FTP server is installed on the remote host. FTP usernames and passwords are stored on the server in plaintext in a filed called 'blackmoon.mdb.' Any user with an account on this host may read the credentials stored in this file, and use them to connect to this FTP server. C Tenable...

CVE-2003-0340

Demarc Puresecure 1.6 stores authentication information for the logging server in plaintext, which allows attackers to steal login names and passwords to gain privileges...

CVE-2003-0340

CVE-2003-0340 affects Demarc Puresecure 1.6, where authentication data for the logging server is stored in plaintext. This plaintext storage enables an attacker to obtain login names and passwords, enabling privilege escalation. The available sources confirm the impact but do not provide patch de...

CVE-2003-0342

BlackMoon FTP Server 2.6 Free Edition, and possibly other distributions and versions, stores user names and passwords in plaintext in the blackmoon.mdb file, which can allow local users to gain privileges...