Qualcomm qpopper 3.0 - 'LIST' Remote Buffer Overflow

// source: https://www.securityfocus.com/bid/948/info A remotely exploitable buffer-overflow vulnerability affects Qualcomm's 'qpopper' daemon. This issue allows users already in possession of a username and password for a POP account to compromise the server running the qpopper daemon. The probl...

Ipswitch IMail Server 78 - Weak Password Encryption

Ipswitch IMail Server 78 - Weak Password Encryption // source: https://www.securityfocus.com/bid/10956/info Ipswitch IMail is reported to use a weak encryption algorithm when obfuscating saved passwords. A local attacker who has the ability to read the encrypted passwords may easily derive the...

dccsnoop.txt

http://www.rootshell.com/ Date: Wed, 10 Feb 1999 14:24:55 -0800 PST From: Gregory Taylor To: [email protected] Subject: Re: New Exploit - DCCsnoop.txt Discovered by Gregory Taylor Febuary 5th, 1999 It is possible to snoop a user's Linux connection through IRC.. DCC Sending the device files...

arcserve.nt.agents.txt

Date: Sun, 21 Feb 1999 21:19:42 -0500 From: Weld Pond To: [email protected] Subject: Severe Security Hole in ARCserve NT agents fwd ---------- Forwarded message ---------- Date: Sun, 21 Feb 1999 17:44:55 -0500 From: ELVIS To: [email protected] Cc: [email protected], CAI , [email protected]...

yahoo.news.ticker.txt

FOR IMMEDIATE RELEASE: Application: Yahoo! NEWS TICKER Platforms : Win95,98,NT Advisory: The installation process of the Yahoo! NEWS TICKER leaves a file name "install.log" in the program directory. The file contains plaintext userid and password. The installation process also sets registry entri...

CVE-1999-1277

BackWeb client stores the username and password in cleartext for proxy authentication in the Communication registry key, which could allow other local users to gain privileges by reading the password...

DUO-PSA-2018-004: Duo Product Security Advisory

Duo Product Security Advisory Advisory ID: DUO-PSA-2018-004 Publication Date: 2018-12-18 Revision Date: 2018-12-18 Status: Confirmed, Fixed Document Revision: 1 Overview Duo has identified and fixed an issue with the Duo Access Gateway DAG. This issue could have allowed for data exposure on the...