Nova weak cryptography

It's possible to computer EC2SECRETKEY with known EC2ACCESSKEY...

PCI DSS Compliance : Insecure Communication Has Been Detected

Applications that fail to adequately encrypt network traffic using strong cryptography are at increased risk of being compromised and exposing cardholder data. An attacker who is able to exploit weak cryptographic processes can gain control of an application or even gain cleartext access to...

Tembria Server Monitor security vulnerability

Weak cryptography, crossite scripting...

Tembria Server Monitor Weak Cryptographic Password Storage Vulnerability

Tembria Server Monitor Weak Cryptographic Password Storage Vulnerability Solutionary ID: SERT-VDN-1004 Solutionary Disclosure URL: http://www.solutionary.com/index/SERT/Vuln-Disclosures/Tembria-Server-Monitor-Weak-Xpto-Pwd-Storage.html CVE ID: Pending Product: Tembria Server Monitor Application...

CVE-2008-1886

The NeffyLauncher 1.0.5 ActiveX control NeffyLauncher.dll in CDNetworks Nefficient Download uses weak cryptography for a KeyCode that blocks unauthorized use of the control, which allows remote attackers to bypass this protection mechanism by calculating the required KeyCode. NOTE: this can be us...

Design/Logic Flaw

The NeffyLauncher 1.0.5 ActiveX control NeffyLauncher.dll in CDNetworks Nefficient Download uses weak cryptography for a KeyCode that blocks unauthorized use of the control, which allows remote attackers to bypass this protection mechanism by calculating the required KeyCode. NOTE: this can be us...

CVE-2008-1886

The NeffyLauncher 1.0.5 ActiveX control NeffyLauncher.dll in CDNetworks Nefficient Download uses weak cryptography for a KeyCode that blocks unauthorized use of the control, which allows remote attackers to bypass this protection mechanism by calculating the required KeyCode. NOTE: this can be us...

CVE-2008-1886

The CVE-2008-1886 issue concerns the NeffyLauncher 1.0.5 ActiveX control (NeffyLauncher.dll) used in CDNetworks Nefficient Download. The root cause is weak cryptography applied to a KeyCode that blocks unauthorized use of the control, allowing remote attackers to bypass the protection mechanism b...

Raidsonic nas-4220 weak cryptography

Encryption key is stored with data...

Citrix NetScaler weak cryptography

Username/password are stored as a part of cookie with encryption XORing with reused key, making it's possible to discover parts of the password...

Design/Logic Flaw

The Globe7 soft phone client 7.3 uses weak cryptography reversed sequence of binary values for the password, which might allow local users to obtain sensitive information...

CVE-2007-5790

The Globe7 soft phone client 7.3 uses weak cryptography reversed sequence of binary values for the password, which might allow local users to obtain sensitive information...

CVE-2007-5790

The CVE-2007-5790 entry concerns the Globe7 soft phone client 7.3, where the password is protected by weak cryptography described as a reversed sequence of binary values. This vulnerability could allow local users to obtain sensitive information. The available documents state the impact as partia...

CVE-2007-5790

The Globe7 soft phone client 7.3 uses weak cryptography reversed sequence of binary values for the password, which might allow local users to obtain sensitive information...

CVE-2005-4860

Spectrum Cash Receipting System before 6.504 uses weak cryptography static substitution in the PASSFILE password file, which makes it easier for local users to gain privileges by decrypting a password...

CVE-2005-4860

Spectrum Cash Receipting System prior to version 6.504 is vulnerable due to weak cryptography (static substitution) in the PASSFILE password file, enabling local users to gain privileges by decrypting a password. Affected: Spectrum Cash Receipting System before 6.504. Root cause: use of static su...

CVE-2007-4150

The Visionsoft Audit on Demand Service VSAOD in Visionsoft Audit 12.4.0.0 uses weak cryptography XOR when 1 transmitting passwords, which allows remote attackers to obtain sensitive information by sniffing the network; and 2 storing passwords in the configuration file, which allows local users to...

Design/Logic Flaw

The Visionsoft Audit on Demand Service VSAOD in Visionsoft Audit 12.4.0.0 uses weak cryptography XOR when 1 transmitting passwords, which allows remote attackers to obtain sensitive information by sniffing the network; and 2 storing passwords in the configuration file, which allows local users to...

CVE-2007-4150

The Visionsoft Audit on Demand Service VSAOD in Visionsoft Audit 12.4.0.0 uses weak cryptography XOR when 1 transmitting passwords, which allows remote attackers to obtain sensitive information by sniffing the network; and 2 storing passwords in the configuration file, which allows local users to...

CVE-2007-4150

The CVE-2007-4150 issue affects Visionsoft Audit 12.4.0.0 (Visionsoft Audit) where weak cryptography (XOR) is used for passwords: during transmission over the network (passwords can be sniffed) and in the configuration file (local read access can reveal passwords). No further exploit details are ...