CVE-2000-0300

The default encryption method of PcAnywhere 9.x uses weak encryption, which allows remote attackers to sniff and decrypt PcAnywhere or NT domain accounts...

Symantec pcAnywhere 9.0 - Weak Encryption

// source: https://www.securityfocus.com/bid/1093/info Symantec pcAnywhere is shipped by default with a weak encryption scheme that is used to encrypt username and password transmittal. Therefore, usernames and password can be retrieved by anyone sniffing the network in between the host computer...

Symantec pcAnywhere 9.0 - Weak Encryption

Symantec pcAnywhere 9.0 - Weak Encryption // source: https://www.securityfocus.com/bid/1093/info Symantec pcAnywhere is shipped by default with a weak encryption scheme that is used to encrypt username and password transmittal. Therefore, usernames and password can be retrieved by anyone sniffing...

CVE-2000-0244

The Citrix ICA Independent Computing Architecture protocol uses weak encryption XOR for user authentication...

Citrix Metaframe 1.0/1.8 - Weak Encryption

// source: https://www.securityfocus.com/bid/1077/info The ICA protocol uses a simple XOR-based encryption algorthm to protect user credentials while stored or in transit. This encryption can be easily broken, meaning that anyone sniffing the connection can obtain user access to the server. The I...

Citrix Metaframe 1.01.8 - Weak Encryption

Citrix Metaframe 1.01.8 - Weak Encryption // source: https://www.securityfocus.com/bid/1077/info The ICA protocol uses a simple XOR-based encryption algorthm to protect user credentials while stored or in transit. This encryption can be easily broken, meaning that anyone sniffing the connection c...

CVE-2000-0214

FTP Explorer uses weak encryption for storing the username, password, and profile of FTP sites...

CVE-2000-0214

CVE-2000-0214 : The incident is tied to FTP Explorer, which stores usernames, passwords, and FTP site profiles using weak encryption. The available data describe the vulnerability as a local issue with partial confidentiality and integrity impact, and a base severity of MEDIUM (score 4.6). No exp...

CVE-2000-0199

When a new SQL Server is registered in Enterprise Manager for Microsoft SQL Server 7.0 and the "Always prompt for login name and password" option is not set, then the Enterprise Manager uses weak encryption to store the login ID and password...

CVE-2000-0199

CVE-2000-0199 affects Microsoft SQL Server 7.0 via Enterprise Manager when the “Always prompt for login name and password” option is not set; the login credentials are stored with weak encryption. The connected Nessus entry also describes a potential local privilege escalation by authenticated us...

CVE-2000-0199

When a new SQL Server is registered in Enterprise Manager for Microsoft SQL Server 7.0 and the "Always prompt for login name and password" option is not set, then the Enterprise Manager uses weak encryption to store the login ID and password...

CVE-2000-0214

FTP Explorer uses weak encryption for storing the username, password, and profile of FTP sites...

CVE-1999-0476

A weak encryption algorithm is used for passwords in SCO TermVision, allowing them to be easily decrypted by a local user...

CVE-1999-0356

ControlIT v4.5 and earlier uses weak encryption to store usernames and passwords in an address book...

CVE-2000-0019

CVE-2000-0019 affects the IMail POP3 daemon. The vulnerability arises from weak encryption, enabling local users to read files with partial confidentiality impact. The provided sources indicate affected versions are not specified and there is no information about a fix in the documents supplied.

CVE-1999-0476

The CVE-1999-0476 entry concerns SCO TermVision which uses a weak password encryption algorithm. The root cause is weak encryption that allows a local user to easily decrypt passwords stored by TermVision. Impact is limited to confidentiality and integrity of password data, as described in the so...

CVE-1999-1002

Netscape Navigator uses weak encryption for storing a user's Netscape mail password...

CVE-2000-0019

IMail POP3 daemon uses weak encryption, which allows local users to read files...

CVE-1999-0944

IBM WebSphere ikeyman tool uses weak encryption to store a password for a key database that is used for SSL connections...

CVE-1999-0944

The CVE stems from IBM WebSphere ikeyman tool storing a password for the SSL key database with weak encryption. Affected component: IBM WebSphere ikeyman tool. Root cause: use of weak encryption for password storage in the key database used for SSL connections, leading to potential disclosure or ...