8660 matches found
CVE-2002-0810
Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, directs error messages from the syncshadowdb command to the HTML output, which could leak sensitive information, including plaintext passwords, if syncshadowdb fails...
CVE-2002-1521
Web Server 4D WS4D 3.6 stores passwords in plaintext in the Ws4d.4DD file, which allows attackers to gain privileges...
CVE-1999-1337
FTP client in Midnight Commander mc before 4.5.11 stores usernames and passwords for visited sites in plaintext in the world-readable history file, which allows other local users to gain privileges...
CVE-1999-1337
CVE-1999-1337 affects Midnight Commander (mc) before 4.5.11. The FTP client stores visited-site usernames/passwords in plaintext in the world-readable history file, enabling local users to gain partial privileges. Root cause: insecure plaintext history storage. Impact: local privilege elevation/p...
CVE-2002-1530
The administrative web interface STEMWADM for SurfControl SuperScout Email Filter allows users to obtain usernames and plaintext passwords via a request to the userlist.asp program, which includes the passwords in a user editing form...
[SECURITY] [DSA 273-1] New krb4 packages fix authentication failure
-------------------------------------------------------------------------- Debian Security Advisory DSA 273-1 [email protected] http://www.debian.org/security/ Martin Schulze March 28th, 2003 http://www.debian.org/security/faq -...
DSA-273 krb4 - Cryptographic weakness
Bulletin has no description...
[SECURITY] [DSA 269-1] New heimdal packages fix authentication failure
-------------------------------------------------------------------------- Debian Security Advisory DSA 269-1 [email protected] http://www.debian.org/security/ Martin Schulze March 26th, 2003 http://www.debian.org/security/faq -...
DSA-269 heimdal - Cryptographic weakness
Bulletin has no description...
CVE-2003-0138
Version 4 of the Kerberos protocol krb4, as used in Heimdal and other packages, allows an attacker to impersonate any principal in a realm via a chosen-plaintext attack...
DEBIAN-CVE-2003-0138
Version 4 of the Kerberos protocol krb4, as used in Heimdal and other packages, allows an attacker to impersonate any principal in a realm via a chosen-plaintext attack...
CVE-2003-0138
Version 4 of the Kerberos protocol krb4, as used in Heimdal and other packages, allows an attacker to impersonate any principal in a realm via a chosen-plaintext attack...
CVE-2003-0138
Version 4 of the Kerberos protocol krb4, as used in Heimdal and other packages, allows an attacker to impersonate any principal in a realm via a chosen-plaintext attack...
CVE-2003-0138
Version 4 of the Kerberos protocol krb4, as used in Heimdal and other packages, allows an attacker to impersonate any principal in a realm via a chosen-plaintext attack...
CVE-2003-0138
CVE-2003-0138 affects Version 4 of the Kerberos protocol (krb4) as used in Heimdal and related packages. The vulnerability enables an attacker to impersonate any principal in a realm via a chosen-plaintext attack, exposing authentication to impersonation within that realm. The provided documents ...
CVE-2002-1449
CVE-2002-1449 affects eUpload 1.0, where the password.txt file is stored in plaintext under the web document root. This plaintext password file enables remote attackers to overwrite arbitrary files by reading password.txt. The available documents specify the vulnerability and impact but do not pr...
CVE-2002-1449
eUpload 1.0 stores the password.txt password file in plaintext under the web document root, which allows remote attackers to overwrite arbitrary files by reading password.txt...
security flaw
ssl3getrecord in s3pkt.c for OpenSSL before 0.9.7a and 0.9.6 before 0.9.6i does not perform a MAC computation if an incorrect block cipher padding is used, which causes an information leak timing discrepancy that may make it easier to launch cryptographic attacks that rely on distinguishing betwe...
PT-2003-1004 · Openssl +1 · Openssl +1
Name of the Vulnerable Software and Affected Versions: OpenSSL versions prior to 0.9.6i OpenSSL versions prior to 0.9.7a OpenSSL-0.9.5a OpenSSL-0.9.6b OpenSSL-devel-0.9.5a OpenSSL-devel-0.9.6b OpenSSL-devel-0.9.6 ssleay affected versions not specified Description: The issue is related to multiple...