CVE-2002-1739

Alt-N Technologies Mdaemon 5.0 through 5.0.6 uses a weak encryption algorithm to store user passwords, which allows local users to crack passwords...

CVE-2005-2030

Ultimate PHP Board (UPB) 1.9.6 GOLD stores passwords in the users.dat file with weak encryption and places it under the web document root, enabling remote attackers to obtain credentials via direct access to db/users.dat. The vulnerability notes suggest exploitation could involve CVE-2005-2005 to...

CVE-2005-2030

Ultimate PHP Board UPB 1.9.6 GOLD uses weak encryption for passwords in the users.dat file, which allows attackers to easily decrypt the passwords and gain privileges, possibly after exploiting CVE-2005-2005 to obtain users.dat...

CVE-2004-2134

CVE-2004-2134 affects Oracle TopLink Mapping Workbench. The vulnerability is a weak encryption of passwords, enabling local users to decrypt them. The CVSS shows local access with low complexity and partial confidentiality/integrity/availability impact. No remediation/version details are provided...

CVE-2004-2134

Oracle toplink mapping workBench uses a weak encryption algorithm for passwords, which allows local users to decrypt the passwords...

Linux Kernel Cryptoloop encrypted filesystem weak encryption

Weak IV Initial Vector generation algorithm allows data watermarking, making it possible to detect data in filesystem...

CVE-2005-1553

GeoVision Digital Video Surveillance System 6.04, 6.1 and 7.0 uses a weak encryption scheme to encrypt passwords, which allows remote attackers to obtain the password via sniffing...

CVE-2005-1553

GeoVision Digital Video Surveillance System 6.04, 6.1 and 7.0 use a weak password encryption scheme that enables password sniffing by remote attackers. The provided documents do not include specifics on affected components, root cause details beyond the weak crypto description, or a published rem...

CVE-2004-1861

Invision NetSupport School Pro uses a weak encryption algorithm to encrypt passwords, which allows local users to obtain passwords...

CVE-2004-1861

CVE-2004-1861 relates to Invision NetSupport School Pro, which uses a weak encryption algorithm to encrypt passwords, enabling local users to obtain passwords. The available documents state the affected product and the underlying issue (weak encryption) but do not specify the exact vulnerable com...

CVE-2005-0322

MERAK Mail Server 7.6.0 with Icewarp Web Mail 5.3.0 and Mail Server 7.6.4r with Icewarp Mail Server 5.3.2 uses weak encryption in the 1 users.cfg, 2 settings.cfg, 3 users.dat or 4 user.dat files, which allows local users to extract the passwords...

CVE-2005-0809

NotifyLink, when configured for client key retrieval, allows remote attackers to obtain AES keys via a direct request to /hwp/get.asp, then uses a weak encryption scheme fixed byte reordering to protect the key, which allows remote attackers to obtain the key via a brute force attack...

Nortel VPN client weak encryption

Cleartext password is stored in memory...

CVE-2005-0809

NotifyLink, when configured for client key retrieval, allows remote attackers to obtain AES keys via a direct request to /hwp/get.asp, then uses a weak encryption scheme fixed byte reordering to protect the key, which allows remote attackers to obtain the key via a brute force attack...

CVE-2005-0809

CVE-2005-0809 affects NotifyLink server: when client key retrieval is enabled, an unauthenticated HTTP POST to /hwp/get.asp can disclose AES keys. The server uses a fixed byte reordering scheme to obfuscate the key, substantially weakening cryptographic protection and enabling brute-force recover...

PeerFTP FTP Server weak encryption

User passwords are stored in the world readable file...

CVE-2005-0322

CVE-2005-0322 affects MERAK Mail Server 7.6.0 with Icewarp Web Mail 5.3.0 and Mail Server 7.6.4r with Icewarp Mail Server 5.3.2. The issue is weak encryption in the configuration and data files (users.cfg, settings.cfg, users.dat, user.dat), which allows local users to extract stored passwords. T...

CVE-2005-0322

MERAK Mail Server 7.6.0 with Icewarp Web Mail 5.3.0 and Mail Server 7.6.4r with Icewarp Mail Server 5.3.2 uses weak encryption in the 1 users.cfg, 2 settings.cfg, 3 users.dat or 4 user.dat files, which allows local users to extract the passwords...

Spectrum Cash passwords weak encryption

Passwords are limited in character set and length and are sored with symbol substitution encryption...

CVE-2004-1022

Kerio Winroute Firewall before 6.0.7, ServerFirewall before 1.0.1, and MailServer before 6.0.5 use symmetric encryption for user passwords, which allows attackers to decrypt the user database and obtain the passwords by extracting the secret key from within the software...