CVE-2001-1546

Pathways Homecare 6.5 is affected by a vulnerability where weak encryption protects usernames and passwords, enabling local attackers to recover credentials from the pwhc.ini file and gain privileges. Affected component: Pathways Homecare 6.5; root cause: weak encryption/storage of credentials in...

CVE-2002-2057

TeeKai Forum 1.2 uses weak encryption of web usage statistics in data/memberlog.txt, which is stored under the web document root with insufficient access control, which allows remote attackers to identify IP's visiting the site by dividing each octet by the MD5 hash of '20'...

CVE-2001-1546

Pathways Homecare 6.5 uses weak encryption for user names and passwords, which allows local users to gain privileges by recovering the passwords from the pwhc.ini file...

CVE-2002-2057

CVE-2002-2057 affects TeeKai Forum 1.2. The vulnerability is described as weak encryption of web usage statistics stored in data/member_log.txt under the web document root with insufficient access control, allowing remote attackers to identify IPs visiting the site by dividing each octet by the M...

CVE-2002-2058

TeeKai Tracking Online 1.0 uses weak encryption of web usage statistics in data/userlog/log.txt, which allows remote attackers to identify IP's visiting the site by dividing each octet by the MD5 hash of '20'...

CVE-2001-1546

Pathways Homecare 6.5 uses weak encryption for user names and passwords, which allows local users to gain privileges by recovering the passwords from the pwhc.ini file...

CVE-2002-2058

TeeKai Tracking Online 1.0 is affected by a weak encryption flaw in the stored web usage statistics (data/userlog/log.txt) that enables remote attackers to identify visiting IPs by dividing each octet by the MD5 hash of '20'. The Red Hat advisory and PT-Security notes corroborate the vulnerabilit...

CVE-2002-2057: Undefined Security Weakness

TeeKai Forum 1.2 uses weak encryption of web usage statistics in data/memberlog.txt, which is stored under the web document root with insufficient access control, which allows remote attackers to identify IP's visiting the site by dividing each octet by the MD5 hash of '20'...

CVE-2002-2058: Use of a Broken or Risky Cryptographic Algorithm

TeeKai Tracking Online 1.0 uses weak encryption of web usage statistics in data/userlog/log.txt, which allows remote attackers to identify IP's visiting the site by dividing each octet by the MD5 hash of '20'...

CVE-2001-1546: Inadequate Encryption Strength

Pathways Homecare 6.5 uses weak encryption for user names and passwords, which allows local users to gain privileges by recovering the passwords from the pwhc.ini file...

CVE-2004-2172

EarlyImpact ProductCart is affected by a vulnerability where passwords are encrypted with a weak scheme, enabling remote attackers to obtain passwords through a chosen-plaintext attack. Affected versions are not clearly specified in the provided documents. The available sources do not indicate a ...

CVE-2004-2172

EarlyImpact ProductCart uses a weak encryption scheme to encrypt passwords, which allows remote attackers to obtain the password via a chosen plaintext attack...

CVE-2004-2172: Inadequate Encryption Strength

EarlyImpact ProductCart uses a weak encryption scheme to encrypt passwords, which allows remote attackers to obtain the password via a chosen plaintext attack...

CVE-2002-1910

CVE-2002-1910 affects Click2Learn Ingenium Learning Management System, versions 5.1–6.1. The root cause is the use of weak, reversible password encryption, enabling attackers to obtain passwords. Public sources confirm the affected products/versions and the vulnerability description across NVD/Re...

CVE-2002-1872

Microsoft SQL Server 6.0 through 2000, with SQL Authentication enabled, uses weak password encryption XOR, which allows remote attackers to sniff and decrypt the password...

CVE-2002-1910

Click2Learn Ingenium Learning Management System 5.1 and 6.1 uses weak encryption for passwords reversible algorithm, which allows attackers to obtain passwords...

CVE-2002-1946

Videsh Sanchar Nigam Limited VSNL Integrated Dialer Software 1.2.000, when the "Save Password" option is used, stores the password with a weak encryption scheme one-to-one mapping in a registry key, which allows local users to obtain and decrypt the password...

CVE-2002-1946: Inadequate Encryption Strength

Videsh Sanchar Nigam Limited VSNL Integrated Dialer Software 1.2.000, when the "Save Password" option is used, stores the password with a weak encryption scheme one-to-one mapping in a registry key, which allows local users to obtain and decrypt the password...

CVE-2002-1910: Inadequate Encryption Strength

Click2Learn Ingenium Learning Management System 5.1 and 6.1 uses weak encryption for passwords reversible algorithm, which allows attackers to obtain passwords...

CVE-2002-1682

NewsReactor 1.0 is affected by a weakness in its encryption scheme that could let local attackers decrypt passwords and access other users’ newsgroup accounts. The PT-2002-2406 entry confirms the affected software/version and describes the root cause as a weak encryption implementation. Remediati...