1669 matches found
CVE-2003-0270
The administration capability for Apple AirPort 802.11 wireless access point devices uses weak encryption XOR with a fixed key for protecting authentication credentials, which could allow remote attackers to obtain administrative access via sniffing when the capability is available via Ethernet o...
CVE-2003-0270
Apple AirPort Base Station (802.11) is affected by CVE-2003-0270. The administrative protocol on TCP 5009 uses XOR with a fixed key to protect credentials, allowing an attacker that can sniff traffic over Ethernet or non-WEP wireless to obtain administrative access. The flaw impacts confidentiali...
Apple Airport weak encryption
Weak encryption of administrator's password XOR with predefined string...
BRS WebWeaver: full disclosure
=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::= topic: BRS WebWeaver: full disclosure product: BRS WebWeaver 1.03 vendor: http://www.brswebweaver.com risk: high date: 31/03/2k3 tested platform: Windows 98 Second Edition discovered by: euronymous /F0KP advisory urls:...
WebWeaver multiple bugs
File type is not checked on file open. DoS on oversized URLs 2,5Mb, weak encryption Caesar code, information leak, directory traversal...
ProtWare weak encryption
Position substitution is used...
ProtWare HTML Guardian 6.x - Encryption
ProtWare HTML Guardian 6.x - Encryption source: https://www.securityfocus.com/bid/7169/info A weakness has been reported in the encryption scheme used by ProtWare HTML Guardian. Specifically, the encryption scheme implemented obfuscates data using a simple bit shifting technique, making it trivia...
GiantRat Mailer weak encryption
Password is stored as cleartext in the word-readable file...
dbtools weak encryption
Account for database connection is stored in .mdb file...
Telindus weak password encryption
During configuration trnsmition password is sent on wire in weak encryption...
CryptoBuddy weak encryption
Multiple problems in cryptoalgorythms implementation...
Weak pkzip encryption
Weak PRNG open possibility for recovering encrypted text with known plain text attack with minimal amount of known text...
CVE-2002-2162
Cerulean Studios Trillian 0.73 and earlier use weak encrypttion XOR for storing user passwords in .ini files in the Trillian directory, which allows local users to gain access to other user accounts...
CVE-2002-2058
TeeKai Tracking Online 1.0 uses weak encryption of web usage statistics in data/userlog/log.txt, which allows remote attackers to identify IP's visiting the site by dividing each octet by the MD5 hash of '20'...
CVE-2002-1682
NewsReactor 1.0 uses a weak encryption scheme, which could allow local users to decrypt the passwords and gain access to other users' newsgroup accounts...
CVE-2002-1910
Click2Learn Ingenium Learning Management System 5.1 and 6.1 uses weak encryption for passwords reversible algorithm, which allows attackers to obtain passwords...
CVE-2002-1697
Electronic Code Book ECB mode in VTun 2.0 through 2.5 uses a weak encryption algorithm that produces the same ciphertext from the same plaintext blocks, which could allow remote attackers to gain sensitive information...
CVE-2002-2057
TeeKai Forum 1.2 uses weak encryption of web usage statistics in data/memberlog.txt, which is stored under the web document root with insufficient access control, which allows remote attackers to identify IP's visiting the site by dividing each octet by the MD5 hash of '20'...
CVE-2002-2133
Telindus 1100 ASDL router running firmware 6.0.x uses weak encryption for UDP session traffic, which allows remote attackers to gain unauthorized access by sniffing and decrypting the administrative password...