CVE-1999-1344

CVE-1999-1344 affects Auto_FTP 0.2, where Auto_FTP.pl stores usernames and passwords in plaintext in the auto_ftp.conf file. The underlying issue is plaintext credential storage, enabling disclosure of credentials over the network (NVD metric: CVSSv2 v2.0 base score 7.5, HIGH). Exploitation detai...

CVE-2001-1013

Apache on Red Hat Linux with with the UserDir directive enabled generates different error codes when a username exists and there is no publichtml directory and when the username does not exist, which could allow remote attackers to determine valid usernames on the server...

CVE-2001-1068

qpopper 4.01 with PAM based authentication on Red Hat systems generates different error messages when an invalid username is provided instead of a valid name, which allows remote attackers to determine valid usernames on the system...

DynFX POPd Denial of Service Vulnerability

Strumpf Noir Society Advisories ! Public release ! -- -= DynFX POPd Denial of Service Vulnerability =- Release date: Saturday, May 26, 2001 Introduction: DynFX MailServer is an SMTP and POP3 Server package for the WINNT and Win2k platforms. This application is available from vendor DynFX Internet...

CVE-2001-0415

The CVE-2001-0415 entry concerns the REDIPlus program (REDI.exe), which logs passwords and user names in cleartext to StartLog.txt. Root cause is cleartext credential logging, enabling local users to access other accounts. Reported impact affects confidentiality, integrity, and availability parti...

Oracle's ADI 7.1.1.10.1 Major security hole

The version of ADI Application Desktop Integrator 7.1.1.10.1 which was recently shipped with Oracle's Financial Applications version 11.5.3 contains a major security breach. Whenever the software is launched, it creates a file called dbg.txt on the local hard drive on the system which contains in...

CVE-2000-0938

Samba Web Administration Tool SWAT in Samba 2.0.7 supplies a different error message when a valid username is provided versus an invalid name, which allows remote attackers to identify valid users on the server...

CVE-2000-1158: Undefined Security Weakness

NAI Sniffer Agent uses base64 encoding for authentication, which allows attackers to sniff the network and easily decrypt usernames and passwords...

CVE-2000-1002

POP3 daemon in Stalker CommuniGate Pro 3.3.2 generates different error messages for invalid usernames versus invalid passwords, which allows remote attackers to determine valid email addresses on the server for SPAM attacks...

CVE-2000-1037

Check Point Firewall-1 session agent 3.0 through 4.1 generates different error messages for invalid user names versus invalid passwords, which allows remote attackers to determine valid usernames and guess a password via a brute force attack...

CVE-2000-1030

CS&T CorporateTime for the Web returns different error messages for invalid usernames and invalid passwords, which allows remote attackers to determine valid usernames on the server...

CVE-2000-1032

The client authentication interface for Check Point Firewall-1 4.0 and earlier generates different error messages for invalid usernames versus invalid passwords, which allows remote attackers to identify valid usernames on the firewall...

CVE-2000-1030

CS&T CorporateTime for the Web returns different error messages for invalid usernames and invalid passwords, which allows remote attackers to determine valid usernames on the server...

CVE-2000-1037

Check Point Firewall-1 session agent 3.0 through 4.1 generates different error messages for invalid user names versus invalid passwords, which allows remote attackers to determine valid usernames and guess a password via a brute force attack...

CVE-2000-1037

The CVE-2000-1037 issue affects Check Point Firewall-1 session agent versions 3.0 through 4.1. The root cause is that the service returns different error messages for invalid usernames versus invalid passwords, enabling remote attackers to enumerate valid usernames and perform brute-force passwor...

TelSrv Reveals Usernames & Passwords After DoS Attack

---------- Details ---------- Application: GAMSoft's TelSrv 1.5 could be more... I don't have time to check, nor do I have the other programs Problem Type: Denial of Service Attack - Reveals User Names & Passwords Author: Patrick Webster mailto:[email protected] Platform: Win95 could be more...

Deerfield Communications MDaemon Mail Server DoS

Deerfield Communications the Wingate perpetrators MDaemon POP server is vulnerable to bigass usernames causing a DoS. MDaemon is a mail server package for 95,98,NT and Win2k. Many systems that run Deerfield's World Client web-mail also use MDaemon. Exploit tested on Win2kpro running MDaemon 3.0.3...

Cayman 3220-H DSL Router 1.0/GatorSurf 5.3 - Denial of Service

source: https://www.securityfocus.com/bid/1219/info Large usernames or passwords sent to the router's HTTP interface restart the router. Router log will show "restart not in response to admin command" Open the router interface with your browser. Username: ......................... x79 + After the...

Переполнение буфера в IC Radius

Переполнение буфера при имени пользователя свыше 24 символов...

CVE-1999-0356

Summary of CVE-1999-0356 (ControlIT) : Affects ControlIT versions prior to 4.5. The issue is the use of weak encryption to store usernames and passwords in an address book, exposing confidentiality and integrity. Root cause: insecure storage of credentials due to weak encryption. No explicit expl...