2007 matches found
CVE-2005-2898
FileZilla vulnerability CVE-2005-2898 affects versions 2.2.14b–2.2.15 (and possibly earlier) where, if “Use secure mode” is disabled, passwords are stored using a weak encryption scheme in the configuration file. This allows local users to obtain sensitive information. The issue is disputed by th...
CVE-2005-2915
The CVE-2005-2915 entry involves the Linksys WRT54G router (various 3.x releases) using a weak XOR-based encoding with a fixed mask for configuration data. This flaw could let an attacker decrypt configuration information and, in conjunction with CVE-2005-2914, potentially re-encrypt it. Connecte...
CVE-2005-2898
NOTE: this issue has been disputed by the vendor. FileZilla 2.2.14b and 2.2.15, and possibly earlier versions, when "Use secure mode" is disabled, uses a weak encryption scheme to store the user's password in the configuration settings file, which allows local users to obtain sensitive informatio...
CVE-2005-2915: Undefined Security Weakness
ezconfig.asp in Linksys WRT54G router 3.01.03, 3.03.6, non-default configurations of 2.04.4, and possibly other versions, uses weak encryption XOR encoding with a fixed byte mask for configuration information, which could allow attackers to decrypt the information and possibly re-encrypt it in...
CVE-2005-2879: Undefined Security Weakness
Advansysperu Software USB Lock Auto-Protect AP 1.5 uses a weak encryption scheme to encrypt passwords, which allows local users to gain sensitive information and bypass USB interface protection...
CVE-2005-2898: Undefined Security Weakness
NOTE: this issue has been disputed by the vendor. FileZilla 2.2.14b and 2.2.15, and possibly earlier versions, when "Use secure mode" is disabled, uses a weak encryption scheme to store the user's password in the configuration settings file, which allows local users to obtain sensitive informatio...
CVE-2005-2593
Parlano MindAlign 5.0 and later versions are described as using weak encryption, with unknown impact and attack vectors. The CVSS v2.0 data from NVD lists a base score of 10.0, attack vector Network, complexity Low, authentication None, and Confidentiality/Integrity/Availability Impact as Complet...
CVE-2005-2599
CVE-2005-2599 affects Hummingbird FTP for Connectivity 10.0. The vulnerability arises from storing the user’s password in the FTP profile using weak encoding, enabling an attacker to gain privileges. The available sources (CVE entries and related records) describe the weakness in password storage...
CVE-2005-2593
Parlano MindAlign 5.0 and later versions uses weak encryption, with unknown impact and attack vectors...
CVE-2005-2599
Hummingbird FTP for Connectivity 10.0 uses weak encryption trivial encoding to store the user's password in the FTP profile, which allows attackers to gain privileges...
CVE-2005-2593
Parlano MindAlign 5.0 and later versions uses weak encryption, with unknown impact and attack vectors...
CVE-2005-2599
Hummingbird FTP for Connectivity 10.0 uses weak encryption trivial encoding to store the user's password in the FTP profile, which allows attackers to gain privileges...
Hummingbird FTP client weak encryption
Profiles are "encrypted" by XOR'ing with fixed byte value 0x7d...
CVE-2005-2599: Undefined Security Weakness
Hummingbird FTP for Connectivity 10.0 uses weak encryption trivial encoding to store the user's password in the FTP profile, which allows attackers to gain privileges...
CVE-2005-2593: Undefined Security Weakness
Parlano MindAlign 5.0 and later versions uses weak encryption, with unknown impact and attack vectors...
Multiple MindAlign instant messenger vulnerabilities
Information leak, authentication bypass, crossite scripting, weak encryption, DoS...
Several Vulnerability Issues Affecting the MindAlign
NISCC Vulnerability Advisory 356752/NISCC/MINDALIGN Several Vulnerability Issues Affecting the MindAlign Product Version Information Advisory Reference 356752/NISCC/MINDALIGN Release Date 12 August 2005 Last Revision 12 August 2005 Version Number 1.0 What is Affected? The following versions of th...
CVE-2005-2281
WebEOC before 6.0.2 uses a weak encryption scheme for passwords, which makes it easier for attackers to crack passwords...