CVE-1999-1562

The CVE-1999-1562 entry concerns gFTP, affected versions 1.13 and all before 2.0.0, which may log a user password in plaintext either in the GUI log window or in a log file. This is a plaintext credential exposure vulnerability in the logging path. Debian’s advisory (DSA-084-1) notes a fix in ver...

CVE-1999-1256

Oracle Database Assistant 1.0 on Oracle 8.0.3 Enterprise Edition stores the database master password in plaintext in the spoolmain.log file when a new database is created, allowing local users to obtain the password from that file. Affected software is Oracle Database Assistant 1.0 and Oracle 8.0...

CVE-2000-1199

CVE-2000-1199 affects PostgreSQL: usernames and passwords are stored in plaintext in (1) pg_shadow and (2) pg_pwd, enabling attackers with sufficient privileges to access databases. This root cause is plaintext credential storage; impact is described as partial confidentiality, partial integrity,...

CVE-1999-1256

Oracle Database Assistant 1.0 in Oracle 8.0.3 Enterprise Edition stores the database master password in plaintext in the spoolmain.log file when a new database is created, which allows local users to obtain the password from that file...

CVE-1999-1561

Nullsoft SHOUTcast server stores the administrative password in plaintext in a configuration file scserv.conf, which could allow a local user to gain administrative privileges on the server...

CVE-1999-1322

The CVE concerns the installation of 1ArcServe Backup and Inoculan AV client modules for Exchange, which can create a log file exchverify.log that stores usernames and passwords in plaintext. Affected components: the Exchange-related client modules for 1ArcServe Backup and Inoculan AV. Underlying...

CVE-1999-1344

CVE-1999-1344 affects Auto_FTP 0.2, where Auto_FTP.pl stores usernames and passwords in plaintext in the auto_ftp.conf file. The underlying issue is plaintext credential storage, enabling disclosure of credentials over the network (NVD metric: CVSSv2 v2.0 base score 7.5, HIGH). Exploitation detai...

CVE-2000-1199

PostgreSQL stores usernames and passwords in plaintext in 1 pgshadow and 2 pgpwd, which allows attackers with sufficient privileges to gain access to databases...

CVE-1999-1561

Technical details about CVE-1999-1561 are not publicly provided in the supplied documents. Monitor for updates from official advisories; no concrete affected products, versions, or fixes are present here.

CVE-1999-1322

The installation of 1ArcServe Backup and Inoculan AV client modules for Exchange create a log file, exchverify.log, which contains usernames and passwords in plaintext...

CVE-1999-1275

The CVE-1999-1275 entry describes a local privilege escalation in Lotus cc:Mail release 8. The issue arises because the postoffice password is stored in plaintext in a hidden file with insecure permissions, allowing local users to access the password and gain privileges. The vulnerability affects...

CVE-2001-1404

Bugzilla before 2.14 stores user passwords in plaintext and sends password requests in an email message, which could allow attackers to gain privileges...

CVE-2000-1199

PostgreSQL stores usernames and passwords in plaintext in 1 pgshadow and 2 pgpwd, which allows attackers with sufficient privileges to gain access to databases...

Snapstream PVS vulnerability

Interrorem security announcement Interrorem - protecting business Software vulnerable: Snapstream PVS Vendor website: http://www.snapstream.com Workaround: Stop the snapstream server Software synopsis: Snapstream PVS is a Personal Video System for Windows Systems. It allows users to schedule...

CVE-2001-1107

SnapStream PVS 1.2a stores its passwords in plaintext in the file SSD.ini, which could allow a remote attacker to gain privileges on the server...

SnapStream PVS 1.2 - Plaintext Password

SnapStream PVS 1.2 - Plaintext Password source: https://www.securityfocus.com/bid/3101/info Snapstream Personal Video Station is an application for Microsoft Windows which allows users to record video output on their PC and view it at a later time, locally or via an HTTP interface. The Snapstream...

SnapStream PVS 1.2 - Plaintext Password

source: https://www.securityfocus.com/bid/3101/info Snapstream Personal Video Station is an application for Microsoft Windows which allows users to record video output on their PC and view it at a later time, locally or via an HTTP interface. The Snapstream PVS web interface runs on port 8129. Th...

Symantec LiveUpdate stores proxy server passwords in plaintext in registry

Overview A vulnerability exists in the way Symantec LiveUpdate stores proxy server passwords which could allow local users to have read access to the key. Description LiveUpdate version 1.5 stores proxy server passwords in clear text in the registry, under...

ArGoSoft FTP Server 1.2.2.2 Weak password encryption

ArGoSoft FTP Server 1.2.2.2 Weak password encryption AFFECTED SYSTEMS ArGoSoft FTP Server 1.2.2.2 DESCRIPTION ArGoSoft FTP Server 1.2.2.2 for win32 is vulnerable to decryption of the password file. As a matter of fact the programmers are aware of this since they have implemented decryption...

Multiple Vulnerabilities In AMLServer

Strumpf Noir Society Advisories ! Public release ! -- -= Multiple Vulnerabilities In AMLServer =- Release date: Monday, June 18, 2001 Introduction: Air Messenger LAN Server is a paging gateway server for MS Windows that allows you to send and recieve messages to a paging network over a TCP/IP LAN...