POP2 Unencrypted Cleartext Login

The remote host is running a POP2 daemon that allows cleartext logins over unencrypted connections. SPDX-FileCopyrightText: 2005 George A. Theall Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

IMAP Unencrypted Cleartext Login

The remote host is running an IMAP daemon that allows cleartext logins over unencrypted connections. NOTE: Valid credentials needs to given to the settings of SPDX-FileCopyrightText: 2004 George A. Theall Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

POP3 Unencrypted Cleartext Login

The remote host is running a POP3 daemon that allows cleartext logins over unencrypted connections. NOTE: Depending on the POP3 server configuration valid credentials needs to be given to the settings of SPDX-FileCopyrightText: 2004 George A. Theall Some text descriptions might be excerpted from ...

Cisco Airespace Wireless LAN Controllers Allow Unencrypted Network Access

...

NetForce NIS password information leak

File with NIS accounts passwords is sent with unencrypted diagnostic e-mail message...

CVE-2002-1848

TightVNC prior to 1.2.4 on Windows stores unencrypted passwords in the WinVNC Properties dialog password field, enabling local users to access passwords. Affected component: WinVNC password storage within the Windows UI; root cause is unencrypted plaintext storage. Impact: local disclosure of cre...

CVE-2002-1848

TightVNC before 1.2.4 running on Windows stores unencrypted passwords in the password text control of the WinVNC Properties dialog, which could allow local users to access passwords...

CVE-2002-1848: Undefined Security Weakness

TightVNC before 1.2.4 running on Windows stores unencrypted passwords in the password text control of the WinVNC Properties dialog, which could allow local users to access passwords...

CVE-2001-1443: Undefined Security Weakness

KTH Kerberos IV and Kerberos V Heimdal for Telnet clients do not encrypt connections if the server does not support the requested encryption, which allows remote attackers to read communications via a man-in-the-middle attack...

firefly_pass_recovery.txt

--------------------- Application: --------------------- FireFly 1.0 --------------------- Introduction: --------------------- Vendor: NetCruiser Software www.netcruiser-software.com Vendor Description: Firefly is a Windows application that allows you to share files with other users. Firefly uses...

CVE-2002-1653: Undefined Security Weakness

Farm9 Cryptcat, when started in server mode with the -e option, does not enable encryption, which allows clients to communicate without encryption despite intended configuration, and may allow remote attackers to sniff sensitive information...

CVE-2004-1709

Datakey Rainbow iKey2032 USB token, when using the CIP client package, does not encrypt communications between the token and the driver, which could allow local users to obtain the PINs of other users...

CVE-2004-1709: Undefined Security Weakness

Datakey Rainbow iKey2032 USB token, when using the CIP client package, does not encrypt communications between the token and the driver, which could allow local users to obtain the PINs of other users...

POP2 Cleartext Logins Permitted

The remote host is running a POP2 daemon that allows cleartext logins over unencrypted connections. An attacker can uncover login names and passwords by sniffing traffic to the POP2 daemon. This script was written by George A. Theall, . See the Nessus Scripts License for details. Changes by...

IMAP Service Cleartext Login Permitted

The remote host is running an IMAP daemon that allows cleartext logins over unencrypted connections. An attacker can uncover user names and passwords by sniffing traffic to the IMAP daemon if a less secure authentication mechanism eg, LOGIN command, AUTH=PLAIN, AUTH=LOGIN is used. This script was...

POP3 Cleartext Logins Permitted

The remote host is running a POP3 daemon that allows cleartext logins over unencrypted connections. An attacker can uncover user names and passwords by sniffing traffic to the POP3 daemon if a less secure authentication mechanism eg, USER command, AUTH PLAIN, AUTH LOGIN is used. Note: This plugin...

Webroot Spy Sweeper weak encryption

Password is stored in registry uencrypted...

CVE-2002-1152

CVE-2002-1152 concerns Konqueror (KDE) versions 3.0 through 3.0.2. The issue is that Konqueror does not reliably detect the secure flag on HTTP cookies, allowing cookies to be sent over unencrypted channels. This could enable remote attackers to capture cookies via sniffing, potentially compromis...

CVE-2002-1152

Konqueror in KDE 3.0 through 3.0.2 does not properly detect the "secure" flag in an HTTP cookie, which could cause Konqueror to send the cookie across an unencrypted channel, which could allow remote attackers to steal the cookie via sniffing...

CVE-1999-1537

IIS 3.x and 4.x does not distinguish between pages requiring encryption and those that do not, which allows remote attackers to cause a denial of service resource exhaustion via SSL requests to the HTTPS port for normally unencrypted files, which will cause IIS to perform extra work to send the...