RuggedCom Weak Cryptography for Password Vulnerability

Overview --------- Begin Update A Part 1 of 2 -------- This is an update to the original advisory titled ICSA-12-146-01—RuggedCom Weak Cryptography for Password Vulnerability that was published May 25, 2012, on the ICS-CERT Web page. Independent researcher Justin W. Clarke identified a default...

Oracle Application Server Multiple Vulnerabilities

The remote host is running Oracle Application Server. It was not possible to determine its version, so the version of Oracle Application Server installed on the remote host could potentially be affected by multiple vulnerabilities : - CVE-2000-0169: Remote command execution in the web listener...

Nova weak cryptography

It's possible to computer EC2SECRETKEY with known EC2ACCESSKEY...

PCI DSS Compliance : Insecure Communication Has Been Detected

Applications that fail to adequately encrypt network traffic using strong cryptography are at increased risk of being compromised and exposing cardholder data. An attacker who is able to exploit weak cryptographic processes can gain control of an application or even gain cleartext access to...

Tembria Server Monitor Weak Cryptographic Password Storage Vulnerability

Tembria Server Monitor Weak Cryptographic Password Storage Vulnerability Solutionary ID: SERT-VDN-1004 Solutionary Disclosure URL: http://www.solutionary.com/index/SERT/Vuln-Disclosures/Tembria-Server-Monitor-Weak-Xpto-Pwd-Storage.html CVE ID: Pending Product: Tembria Server Monitor Application...

Tembria Server Monitor security vulnerability

Weak cryptography, crossite scripting...

CVE-2008-1886

The NeffyLauncher 1.0.5 ActiveX control NeffyLauncher.dll in CDNetworks Nefficient Download uses weak cryptography for a KeyCode that blocks unauthorized use of the control, which allows remote attackers to bypass this protection mechanism by calculating the required KeyCode. NOTE: this can be us...

Design/Logic Flaw

The NeffyLauncher 1.0.5 ActiveX control NeffyLauncher.dll in CDNetworks Nefficient Download uses weak cryptography for a KeyCode that blocks unauthorized use of the control, which allows remote attackers to bypass this protection mechanism by calculating the required KeyCode. NOTE: this can be us...

CVE-2008-1886

The CVE-2008-1886 issue concerns the NeffyLauncher 1.0.5 ActiveX control (NeffyLauncher.dll) used in CDNetworks Nefficient Download. The root cause is weak cryptography applied to a KeyCode that blocks unauthorized use of the control, allowing remote attackers to bypass the protection mechanism b...

CVE-2008-1886

The NeffyLauncher 1.0.5 ActiveX control NeffyLauncher.dll in CDNetworks Nefficient Download uses weak cryptography for a KeyCode that blocks unauthorized use of the control, which allows remote attackers to bypass this protection mechanism by calculating the required KeyCode. NOTE: this can be us...

Raidsonic nas-4220 weak cryptography

Encryption key is stored with data...

Citrix NetScaler weak cryptography

Username/password are stored as a part of cookie with encryption XORing with reused key, making it's possible to discover parts of the password...

CVE-2007-5790

The Globe7 soft phone client 7.3 uses weak cryptography reversed sequence of binary values for the password, which might allow local users to obtain sensitive information...

Design/Logic Flaw

The Globe7 soft phone client 7.3 uses weak cryptography reversed sequence of binary values for the password, which might allow local users to obtain sensitive information...

CVE-2007-5790

The CVE-2007-5790 entry concerns the Globe7 soft phone client 7.3, where the password is protected by weak cryptography described as a reversed sequence of binary values. This vulnerability could allow local users to obtain sensitive information. The available documents state the impact as partia...

CVE-2007-5790

The Globe7 soft phone client 7.3 uses weak cryptography reversed sequence of binary values for the password, which might allow local users to obtain sensitive information...

CVE-2005-4860

Spectrum Cash Receipting System before 6.504 uses weak cryptography static substitution in the PASSFILE password file, which makes it easier for local users to gain privileges by decrypting a password...

CVE-2005-4860

Spectrum Cash Receipting System prior to version 6.504 is vulnerable due to weak cryptography (static substitution) in the PASSFILE password file, enabling local users to gain privileges by decrypting a password. Affected: Spectrum Cash Receipting System before 6.504. Root cause: use of static su...

CVE-2007-4150

The Visionsoft Audit on Demand Service VSAOD in Visionsoft Audit 12.4.0.0 uses weak cryptography XOR when 1 transmitting passwords, which allows remote attackers to obtain sensitive information by sniffing the network; and 2 storing passwords in the configuration file, which allows local users to...

Design/Logic Flaw

The Visionsoft Audit on Demand Service VSAOD in Visionsoft Audit 12.4.0.0 uses weak cryptography XOR when 1 transmitting passwords, which allows remote attackers to obtain sensitive information by sniffing the network; and 2 storing passwords in the configuration file, which allows local users to...