CVE-2006-0898

Crypt::CBC Perl module 2.16 and earlier, when running in RandomIV mode, uses an initialization vector IV of 8 bytes, which results in weaker encryption when used with a cipher that requires a larger block size than 8 bytes, such as Rijndael...

CVE-2006-0898

Crypt::CBC Perl module 2.16 and earlier, when running in RandomIV mode, uses an initialization vector IV of 8 bytes, which results in weaker encryption when used with a cipher that requires a larger block size than 8 bytes, such as Rijndael...

Code injection

The PSCipher function in PeopleSoft People Tools 8.4x uses PKCS 5 with a fixed DES key to store user passwords, which makes it easier for local users to guess passwords using a dictionary attack that compares output strings...

PeopleSoft (Oracle) PSCipher Encryption Weakness

Vendor: PeopleSoft Product: People Tools Version: 8.4x Platform: Multi-platform Title: Weak Encryption Description: PeopleSoft uses PSCipher for encryption/hashing purposes. Based on observations from the output of PSCipher and on our familiarity with the cryptographic library objects and methods...

Peoplesoft People Tools PSCipher() function weak encryption

Weak DES block cypher without feedback is used...

Weak Net::SSLeay perl module encryption

/tmp/entropy file is used for entropy gathering if no entropy source is specified with EGDPATH envoronment variable. Attacker can fille file with known data...

CVE-2005-4066

Total Commander 6.53 uses weak encryption to store FTP usernames and passwords in WCXFTP.INI, which allows local users to decrypt the passwords and gain access to FTP servers, as possibly demonstrated by the W32.Gudeb worm...

CVE-2005-4066

The CVE-2005-4066 entry concerns Total Commander 6.53 storing FTP credentials in WCX_FTP.INI with weak encryption, enabling local users to decrypt passwords and access FTP servers. The vulnerability description and references consistently indicate local credential exposure as the impact; specific...

CVE-2005-4066

Total Commander 6.53 uses weak encryption to store FTP usernames and passwords in WCXFTP.INI, which allows local users to decrypt the passwords and gain access to FTP servers, as possibly demonstrated by the W32.Gudeb worm...

CVE-2005-3800

Macromedia Contribute Publishing Server CPS before 1.11 uses a weak algorithm to encrypt user password in connection keys that use shared FTP login credentials, which allows attackers to obtain sensitive information...

CVE-2005-3800

The CVE concerns Macromedia Contribute Publishing Server (CPS) prior to version 1.11 that uses a weak algorithm to encrypt user passwords within connection keys that rely on shared FTP login credentials. The underlying issue enables disclosure of sensitive information by an attacker who can acces...

CVE-2005-3800

Macromedia Contribute Publishing Server CPS before 1.11 uses a weak algorithm to encrypt user password in connection keys that use shared FTP login credentials, which allows attackers to obtain sensitive information...

CVE-2002-2162

Cerulean Studios Trillian 0.73 and earlier stores passwords in .ini files in the Trillian directory using weak XOR encryption, enabling local users to access other users’ credentials. Affected product/version: Trillian

CVE-2002-2162

Cerulean Studios Trillian 0.73 and earlier use weak encrypttion XOR for storing user passwords in .ini files in the Trillian directory, which allows local users to gain access to other user accounts...

CVE-2003-1276

Netfone.exe of NetTelephone 3.5.6 uses weak encryption for user PIN's and stores user account numbers in plaintext in the HKEYCURRENTUSER\Software\MediaRing.com\SDK\NetTelephone\settings registry key, which could allow local users to gain unauthorized access to NetTelephone accounts...

CVE-2002-2133

Telindus 1100 ASDL router running firmware 6.0.x uses weak encryption for UDP session traffic, which allows remote attackers to gain unauthorized access by sniffing and decrypting the administrative password...

CVE-2002-2133

CVE-2002-2133 describes a vulnerability in Telindus 1100 ADSL router firmware 6.0.x where weak encryption is used for UDP session traffic. This weakness could allow remote attackers to gain unauthorized access by sniffing and decrypting the administrative password. Documents do not provide remedi...

CVE-2003-1276

Netfone.exe of NetTelephone 3.5.6 is vulnerable due to weak encryption for user PINs and plaintext storage of account numbers in the registry (HKCU\Software\MediaRing.com\SDK\NetTelephone\settings). Local users could potentially gain unauthorized access to NetTelephone accounts. The connected doc...

OfficeScan configuration file disclosure

Trend Micro OfficeScan Corporate Edition Japanese version: Virus Buster Corporate Edition web-based management console let anybody access /officescan/hotdownload without authentication. Reading the configuration file /officescan/hotdownload/ofcscan.ini will reveal information on your system. More...

WS_FTP client weak stored password

The remote host has a version of the WSFTP client which use a weak encryption method to store site password. OpenVAS Vulnerability Test $Id: wsftpclientweakstoredpass.nasl 6040 2017-04-27 09:02:38Z teissa $ Description: WSFTP client weak stored password Authors: David Maciejak based on work from ...