CVE-2003-1482

The backup configuration file for Microsoft MN-500 wireless base station stores administrative passwords in plaintext, which allows local users to gain access...

Security bug in Xerox Document Centre

CONTACT INFORMATION =============================================================================== Name : J.A. Gutierrez E-mail : [email protected] Reported this to the vendor on Mon Dec 15 2003 using feedback form at http://www.xerox.com, since I couldn't find a security contact. TECHNICA...

Aardvark Topsites 4.1.0 Vulnerabilities

Vendor : Aardvarkind URL : http://www.aardvarkind.com Version : Aardvark Topsites PHP 4.1.0 Risk : Multiple Vulnerabilities Description: Aardvark Topsites is a popular free PHP topsites script. See URL for details. Plaintext Database Pass Weakness: The login info for the database being used by...

Aardvark Topsites 4.1 PHP - Multiple Vulnerabilities

Aardvark Topsites 4.1 PHP - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/9231/info Multiple vulnerabilities have been identified in the software that include information disclosure, path disclosure, SQL injection, and a plaintext password weakness. Aardvark Topsites PHP...

Aardvark Topsites 4.1.0 - Multiple Vulnerabilities

Aardvark Topsites 4.1.0 - Multiple Vulnerabilities Aardvark Topsites Multiple Vulnerabilities Vendor: Aardvark Industries Product: Aardvark Topsites Version: = 4.1.0 Website: http://www.aardvarkind.com/ BID: 9231 Description: Aardvark Topsites is a popular free PHP topsites script. See URL for...

Aardvark Topsites 4.1 PHP - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/9231/info Multiple vulnerabilities have been identified in the software that include information disclosure, path disclosure, SQL injection, and a plaintext password weakness. Aardvark Topsites PHP version 4.1.0 has been reported to be prone to these issu...

Plaintext Vulnerability in Alan Ward Acart

Vulnerability: Plaintext Vulnerability Description: All of the data in this database is stored in plain text not encrypted, including usernames, passwords, credit card numbers, addresses, etc. Many times the database is placed into a web accessible folder by default Exploit: None Required Solutio...

CVE-2003-0881

Mail in Mac OS X before 10.3, when configured to use MD5 Challenge Response, uses plaintext authentication if the CRAM-MD5 hashed login fails, which could allow remote attackers to gain privileges by sniffing the password...

CVE-2003-0881

Mail in Mac OS X before 10.3, when configured to use MD5 Challenge Response, uses plaintext authentication if the CRAM-MD5 hashed login fails, which could allow remote attackers to gain privileges by sniffing the password...

CVE-2003-0881

The vulnerability (CVE-2003-0881) affects Mac OS X prior to 10.3 when configured for MD5 Challenge Response. If the CRAM-MD5 hashed login fails, the system uses plaintext authentication, potentially allowing remote attackers to sniff the password and gain privileges. The connected documents provi...

TheServer server.ini Direct Request Plaintext Credentials Disclosure

We were able to read the server.ini file. It may contain sensitive information like plaintext passwords. This flaw is known to affect TheServer. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. References: Date: Mon, 14 Oct 2002 14:50:02 -0400 EDT From: "Larry W. Cashdollar" To:...

Re: Internet Explorer and Opera local zone restriction bypass

There was not a lot of details in your post, so I will try to verify and clarify your findings. First things first, this is not a problem with Microsofts Internet Explorer, but with Macromedia and their Flash player. I could reproduce this issue successfully with a fresh install of the latest Fla...

Planet WGSD-1020

Добрый день! Не знаю, может кто уже присылал... В свитчах Planet WGSD-1020 есть закладка. Пользователь superuser с паролем planet. В пользовательском интерфейсе он нигде не упоминается, но его видно в файле конфигурации кстати, несмотря на то, что файл конфигурации бинарный, имена и пароли там...

EZsite Forum Discloses Passwords to Remote Users

The remote host is running EZsite Forum. It is reported that this software stores usernames and passwords in plaintext form in the 'Database/EZsiteForum.mdb' file. A remote user can reportedly download this database. %NASLMINLEVEL 70300 This script written by deepquest Ref: Date: 4 sep , 2003...

Security hole in MatrikzGB

Security hole in MatrikzGB Guestbook 15/8/2003 Vulnerable Versions: Version 2.0 and prior Version 3 not tested Summary: MatrikzGB was written by Thomas Hempel for www.onsite.org. A bug in index.php allows a user with a regular user account to give administrator rights to himself. Details: The bug...

DWebPro 3.4.1 - Http.ini Plaintext Password Storage

DWebPro 3.4.1 - Http.ini Plaintext Password Storage source: https://www.securityfocus.com/bid/8438/info A vulnerability has been reported to exist in the DWebPro web server software. This problem allows an attacker to view database authentication credentials by accessing a plain text file named...

DWebPro 3.4.1 - Http.ini Plaintext Password Storage

source: https://www.securityfocus.com/bid/8438/info A vulnerability has been reported to exist in the DWebPro web server software. This problem allows an attacker to view database authentication credentials by accessing a plain text file named 'http.ini'. An attacker will require read access to...

CVE-2003-0406

PalmVNC 1.40 and earlier stores passwords in plaintext in the PalmVNCDB, which is backed up to PCs that the Palm is synchronized with, which could allow attackers to gain privileges...

eLDAPo index.php Plaintext Password Disclosure

The remote host is hosting eLDAPo, a PHP-based CGI suite designed to perform LDAP queries. This application stores the passwords to the LDAP server in plaintext in its source file. An attacker can read the source code of index.php and use the information contained to gain credentials on a...

CVE-2003-0406

CVE-2003-0406 concerns PalmVNC (1.40 and earlier) where passwords are stored in plaintext in the PalmVNCDB. This database is backed up to PCs with which the Palm is synchronized, potentially allowing attackers with local access to gain privileges on the target. The available documents specify the...