CVE-2002-2057

TeeKai Forum 1.2 uses weak encryption of web usage statistics in data/memberlog.txt, which is stored under the web document root with insufficient access control, which allows remote attackers to identify IP's visiting the site by dividing each octet by the MD5 hash of '20'...

CVE-2002-2162

Cerulean Studios Trillian 0.73 and earlier use weak encrypttion XOR for storing user passwords in .ini files in the Trillian directory, which allows local users to gain access to other user accounts...

CVE-2002-2133

Telindus 1100 ASDL router running firmware 6.0.x uses weak encryption for UDP session traffic, which allows remote attackers to gain unauthorized access by sniffing and decrypting the administrative password...

DEBIAN-CVE-2002-1697

Electronic Code Book ECB mode in VTun 2.0 through 2.5 uses a weak encryption algorithm that produces the same ciphertext from the same plaintext blocks, which could allow remote attackers to gain sensitive information...

CVE-2002-1697

Electronic Code Book ECB mode in VTun 2.0 through 2.5 uses a weak encryption algorithm that produces the same ciphertext from the same plaintext blocks, which could allow remote attackers to gain sensitive information...

PT-2002-2406 · Newsreactor · Newsreactor

Name of the Vulnerable Software and Affected Versions: NewsReactor version 1.0 Description: The issue is related to a weak encryption scheme used by the software, which could allow local users to decrypt passwords and gain access to other users' newsgroup accounts. Recommendations: For NewsReacto...

PT-2002-2594 · Microsoft · Sql Server

Name of the Vulnerable Software and Affected Versions: Microsoft SQL Server versions 6.0 through 2000 Description: The issue allows remote attackers to sniff and decrypt passwords due to the use of weak password encryption XOR when SQL Authentication is enabled. Recommendations: For Microsoft SQL...

PT-2002-2779 · Teekai · Teekai Tracking Online

Name of the Vulnerable Software and Affected Versions: TeeKai Tracking Online version 1.0 Description: The issue concerns the weak encryption of web usage statistics stored in the data/userlog/log.txt file. This weakness allows remote attackers to identify the IP addresses of visitors to the site...

PT-2002-2461 · Alt N Technologies · Mdaemon

Name of the Vulnerable Software and Affected Versions: Alt-N Technologies Mdaemon versions 5.0 through 5.0.6 Description: The issue concerns the use of a weak encryption algorithm to store user passwords, allowing local users to crack passwords. Recommendations: For versions 5.0 through 5.0.6,...

PT-2002-2420 · Max Krasnyansky · Vtun

Name of the Vulnerable Software and Affected Versions: VTun versions 2.0 through 2.5 Description: The Electronic Code Book ECB mode in VTun uses a weak encryption algorithm that produces the same ciphertext from the same plaintext blocks. This could allow remote attackers to gain sensitive...

PT-2002-2667 · Videsh Sanchar Nigam Limited · Vsnl Integrated Dialer

Name of the Vulnerable Software and Affected Versions: Videsh Sanchar Nigam Limited VSNL Integrated Dialer Software version 1.2.000 Description: The issue concerns the storage of passwords using a weak encryption scheme, specifically a one-to-one mapping, in a registry key when the "Save Password...

Telindus 112x ADSL Router - Weak Password Encryption

Telindus Router series 112x has a well-know authentication problem, which lets to extract router password from a UDP-dump sniffed over 9833 port. More about this at: http://www.securiteam.com/securitynews/5DP0A2K7GY.html or http://neworder.box.sk/showme.php3?id=6730 New firmware 6.0.27, Jul/2002...

Microsoft Windows Remote Desktop Protocol (RDP) uses weak algorithm for encrypting packets

Overview Microsoft Windows Remote Desktop Protocol RDP uses a weak algorithm for encrypting packets. Description Microsoft describes RDP as follows.RDP is based on, and is an extension of, the T.120 protocol family standards. It is a multichannel-capable protocol that allows for separate virtual...

Multiple Click2Learn Ingenium bugs

Password's hashes access, weak encryption...

Webserver 4D weak encryption

Passwords are stored in cleartext...

CVE-2002-0706

UserManager.js in the Web Reports Server for SurfControl SuperScout WebFilter uses weak encryption for administrator functions, which allows remote attackers to decrypt the administrative password using a hard-coded key in a Javascript function...

CVE-2002-0706

CVE-2002-0706 affects SurfControl SuperScout WebFilter’s Web Reports Server, specifically the UserManager.js component. The root cause is the use of weak encryption for administrator functions, with a hard-coded key inside a JavaScript function, enabling decryption of the admin password. This all...

CVE-2002-0706

UserManager.js in the Web Reports Server for SurfControl SuperScout WebFilter uses weak encryption for administrator functions, which allows remote attackers to decrypt the administrative password using a hard-coded key in a Javascript function...

CVE-2002-0706: Undefined Security Weakness

UserManager.js in the Web Reports Server for SurfControl SuperScout WebFilter uses weak encryption for administrator functions, which allows remote attackers to decrypt the administrative password using a hard-coded key in a Javascript function...

wp--02-0005: Multiple Vulnerabilities in SuperScout Web Reports Server

Westpoint Security Advisory Title: Multiple Vulnerabilities in SuperScout Web Reports Server Risk Rating: High Software: SurfControl SuperScout WebFilter Platforms: Win32 WinNT/ Win2k Vendor URL: www.surfcontrol.com Author: Matt Moore [email protected] Date: 1st October 2002 Advisory ID:...