CVE-2001-1546

Pathways Homecare 6.5 uses weak encryption for user names and passwords, which allows local users to gain privileges by recovering the passwords from the pwhc.ini file...

CVE-2001-1546

Pathways Homecare 6.5 is affected by a vulnerability where weak encryption protects usernames and passwords, enabling local attackers to recover credentials from the pwhc.ini file and gain privileges. Affected component: Pathways Homecare 6.5; root cause: weak encryption/storage of credentials in...

CVE-2001-1546

Pathways Homecare 6.5 uses weak encryption for user names and passwords, which allows local users to gain privileges by recovering the passwords from the pwhc.ini file...

CVE-2002-2058

TeeKai Tracking Online 1.0 uses weak encryption of web usage statistics in data/userlog/log.txt, which allows remote attackers to identify IP's visiting the site by dividing each octet by the MD5 hash of '20'...

CVE-2002-2057

TeeKai Forum 1.2 uses weak encryption of web usage statistics in data/memberlog.txt, which is stored under the web document root with insufficient access control, which allows remote attackers to identify IP's visiting the site by dividing each octet by the MD5 hash of '20'...

CVE-2002-2058

TeeKai Tracking Online 1.0 is affected by a weak encryption flaw in the stored web usage statistics (data/userlog/log.txt) that enables remote attackers to identify visiting IPs by dividing each octet by the MD5 hash of '20'. The Red Hat advisory and PT-Security notes corroborate the vulnerabilit...

CVE-2002-2057

CVE-2002-2057 affects TeeKai Forum 1.2. The vulnerability is described as weak encryption of web usage statistics stored in data/member_log.txt under the web document root with insufficient access control, allowing remote attackers to identify IPs visiting the site by dividing each octet by the M...

CVE-2004-2172

EarlyImpact ProductCart is affected by a vulnerability where passwords are encrypted with a weak scheme, enabling remote attackers to obtain passwords through a chosen-plaintext attack. Affected versions are not clearly specified in the provided documents. The available sources do not indicate a ...

CVE-2004-2172

EarlyImpact ProductCart uses a weak encryption scheme to encrypt passwords, which allows remote attackers to obtain the password via a chosen plaintext attack...

CVE-2002-1910

CVE-2002-1910 affects Click2Learn Ingenium Learning Management System, versions 5.1–6.1. The root cause is the use of weak, reversible password encryption, enabling attackers to obtain passwords. Public sources confirm the affected products/versions and the vulnerability description across NVD/Re...

CVE-2002-1872

Microsoft SQL Server 6.0 through 2000, with SQL Authentication enabled, uses weak password encryption XOR, which allows remote attackers to sniff and decrypt the password...

CVE-2002-1910

Click2Learn Ingenium Learning Management System 5.1 and 6.1 uses weak encryption for passwords reversible algorithm, which allows attackers to obtain passwords...

CVE-2002-1946

Videsh Sanchar Nigam Limited VSNL Integrated Dialer Software 1.2.000, when the "Save Password" option is used, stores the password with a weak encryption scheme one-to-one mapping in a registry key, which allows local users to obtain and decrypt the password...

CVE-2002-1682

NewsReactor 1.0 is affected by a weakness in its encryption scheme that could let local attackers decrypt passwords and access other users’ newsgroup accounts. The PT-2002-2406 entry confirms the affected software/version and describes the root cause as a weak encryption implementation. Remediati...

CVE-2002-1739

Alt-N Technologies Mdaemon versions 5.0–5.0.6 store user passwords with a weak encryption algorithm, enabling local users to crack them. Local access is required; confidentiality impact is indicated. Remediation: upgrade to a version that uses stronger password encryption. The connected PT-securi...

CVE-2005-2030

Ultimate PHP Board UPB 1.9.6 GOLD uses weak encryption for passwords in the users.dat file, which allows attackers to easily decrypt the passwords and gain privileges, possibly after exploiting CVE-2005-2005 to obtain users.dat...

CVE-2002-1697

Electronic Code Book ECB mode in VTun 2.0 through 2.5 uses a weak encryption algorithm that produces the same ciphertext from the same plaintext blocks, which could allow remote attackers to gain sensitive information...

CVE-2002-1682

NewsReactor 1.0 uses a weak encryption scheme, which could allow local users to decrypt the passwords and gain access to other users' newsgroup accounts...

CVE-2002-1697

VTun ECB vulnerability (CVE-2002-1697) : The ECB mode used in VTun 2.0–2.5 produces identical ciphertext for identical plaintext blocks, enabling a remote attacker to potentially gain sensitive information. Affected products: VTun versions 2.0 through 2.5. Root cause: use of ECB encryption mode. ...

CVE-2002-1697

Electronic Code Book ECB mode in VTun 2.0 through 2.5 uses a weak encryption algorithm that produces the same ciphertext from the same plaintext blocks, which could allow remote attackers to gain sensitive information...