Учетные записи miramail в открытом тексте (weak encryption)

Учетные записи пользователей хранятся в открытом тексте...

[PTL-2002-01] Vulnerabilities in Oracle9iAS Web Cache

PenTest Limited www.pentest-limited.com Security Advisory Vulnerabilities in Oracle9iAS Web Cache Author: Mark Rowe [email protected] Pete Finnigan [email protected] Date: 7th January 2002 Reference: ptl-2002-01...

CVE-2001-1546

Pathways Homecare 6.5 uses weak encryption for user names and passwords, which allows local users to gain privileges by recovering the passwords from the pwhc.ini file...

PT-2001-2631 · Pathways · Pathways Homecare

Name of the Vulnerable Software and Affected Versions: Pathways Homecare version 6.5 Description: The issue concerns the use of weak encryption for user names and passwords. This weakness allows local users to gain privileges by recovering the passwords from the pwhc.ini file. Recommendations: Fo...

McKesson Pathways Homecare 6.5 - Weak Username and Password Encryption

McKesson Pathways Homecare 6.5 - Weak Username and Password Encryption source: https://www.securityfocus.com/bid/3653/info McKesson Pathways Homecare is a client/server application which is used to track patient information, billing information and medical records for home care patients. The...

McKesson Pathways Homecare 6.5 - Weak 'Username' and Password Encryption

source: https://www.securityfocus.com/bid/3653/info McKesson Pathways Homecare is a client/server application which is used to track patient information, billing information and medical records for home care patients. The administrative username and password are encrypted in the pwhc.ini file on...

Проблемы с Secure Password Authentication в Outlook Express (weak encryption)

Авторизацию в Outlook Expres можно использовать для доступа к корпоративным ресурсам...

Уязвимости в авторизации Yahoo Messanger (weak encryption)

Пароль передается в формате cryp без механизма challenge-response что делает возможным replay-атаки и атаки на перебор...

Слабое шифрование в PHP-Nuke (weak encryption)

Вместо исопльзование сеансовых cookie, cookie содержат пароль администратора в base64...

Слабое шифрование в Datek Streamer (weak encryption)

Часть важных данных о пользователе уходит по незащищенному каналу...

Открытые пароли в Pc-to-Phone (weak encryption)

Пароли хранятся в общедоступном месте...

CVE-2001-1151

Trend Micro OfficeScan Corporate Edition aka Virus Buster 3.53 allows remote attackers to access sensitive information from the hotdownload directory without authentication, such as the ofcscan.ini configuration file, which contains a weakly encrypted password...

CVE-1999-1078

The CVE applies to Ipswitch WS_FTP Pro (6.0) where passwords are stored with weak encryption in initialization files. This enables a remote attacker to decrypt stored passwords and potentially gain privileges. OpenVAS and Nessus entries corroborate weak stored password issues in WS_FTP Pro/Client...

CVE-1999-1101

CVE-1999-1101 concerns the Kabsoftware Lydia utility, which stores user passwords in the lydia.ini file using weak encryption. This storage method allows local users to decrypt the passwords and potentially gain privileges. The root cause, as described, is the weak encryption used for password st...

CVE-1999-1271

CVE-1999-1271 concerns Macromedia Dreamweaver, where credentials for FTP are stored with weak encryption. The root cause is weak encryption that enables local users to decrypt other users’ FTP passwords. The entry provides a high-level impact on confidentiality (partial) but does not specify affe...

CVE-1999-1366

CVE-1999-1366 affects Pegasus Mail client (Pegasus e-mail client) 3.0 and earlier. The vulnerability arises from storing POP3 passwords in pmail.ini with weak encryption, allowing local users to decrypt passwords and read e-mail. The provided documents do not include an official fix or remediatio...

CVE-1999-1543

CVE-1999-1543 affects macOS where passwords stored in the Users & Groups Data File are protected by weak encryption. Root cause: weak encryption of password storage. Impact per available data: partial confidentiality, partial integrity, and partial availability if an attacker has local access. Ex...

CVE-1999-1543

MacOS uses weak encryption for passwords that are stored in the Users & Groups Data File...

CVE-1999-1078

WSFTP Pro 6.0 uses weak encryption for passwords in its initialization files, which allows remote attackers to easily decrypt the passwords and gain privileges...

CVE-1999-1101

Kabsoftware Lydia utility uses weak encryption to store user passwords in the lydia.ini file, which allows local users to easily decrypt the passwords and gain privileges...