1659 matches found
CVE-2001-0586
Affected software: Trend Micro ScanMail for Exchange 3.5 Evaluation. Vulnerability: local attacker can recover administrative credentials by exploiting unprotected registry keys and weakly encrypted passwords. Root cause: insecure credential storage in registry and weak encryption. Impact: potent...
Открытый пароль в phpPgAdmin (weak encryption)
Пароль хранится в открытом тексте...
CVE-2001-1005
CVE-2001-1005 affects Starfish Truesync Desktop 2.0b used on the REX 5000 PDA. The underlying issue is weak encryption used to store the user password in a registry key, enabling an attacker with registry access to decrypt the password and gain privileges. NVD lists CVSSv2 base score 7.5 (HIGH) w...
CVE-2001-1003
Affected software : Respondus 1.1.2 for WebCT. Vulnerability : weak encryption used to remember usernames and passwords stored in WEBCT.SVR. Impact : local users who can read WEBCT.SVR can decrypt passwords and gain additional privileges. Remediation : not specified in the provided documents.
CVE-2001-0983
UltraEdit uses weak encryption to record FTP passwords in the uedit32.ini file, which allows local users who can read the file to decrypt the passwords and gain privileges...
CVE-2001-1003
Respondus 1.1.2 for WebCT uses weak encryption to remember usernames and passwords, which allows local users who can read the WEBCT.SVR file to decrypt the passwords and gain additional privileges...
CVE-2001-1005
Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA uses weak encryption to store the user password in a registry key, which allows attackers who have access to the registry key to decrypt the password and gain privileges...
CVE-2001-0983
The CVE-2001-0983 entry concerns UltraEdit, where FTP passwords are stored in the uedit32.ini file using weak encryption. This weakness allows local users who can read the file to decrypt passwords and potentially gain privileges. The available connected documents corroborate UltraEdit as the aff...
Слабое шифрование в NewsReactor (weak encryption)
Пароли хранятся в открытом виде...
Ключ в открытом тексте в драйверах Intel WLAN (Weak encryption)
WEP-Key хранится в реестре в открытом виде...
Учетные записи miramail в открытом тексте (weak encryption)
Учетные записи пользователей хранятся в открытом тексте...
[PTL-2002-01] Vulnerabilities in Oracle9iAS Web Cache
PenTest Limited www.pentest-limited.com Security Advisory Vulnerabilities in Oracle9iAS Web Cache Author: Mark Rowe [email protected] Pete Finnigan [email protected] Date: 7th January 2002 Reference: ptl-2002-01...
CVE-2001-1546
Pathways Homecare 6.5 uses weak encryption for user names and passwords, which allows local users to gain privileges by recovering the passwords from the pwhc.ini file...
PT-2001-2631 · Pathways · Pathways Homecare
Name of the Vulnerable Software and Affected Versions: Pathways Homecare version 6.5 Description: The issue concerns the use of weak encryption for user names and passwords. This weakness allows local users to gain privileges by recovering the passwords from the pwhc.ini file. Recommendations: Fo...
McKesson Pathways Homecare 6.5 - Weak Username and Password Encryption
McKesson Pathways Homecare 6.5 - Weak Username and Password Encryption source: https://www.securityfocus.com/bid/3653/info McKesson Pathways Homecare is a client/server application which is used to track patient information, billing information and medical records for home care patients. The...
McKesson Pathways Homecare 6.5 - Weak 'Username' and Password Encryption
source: https://www.securityfocus.com/bid/3653/info McKesson Pathways Homecare is a client/server application which is used to track patient information, billing information and medical records for home care patients. The administrative username and password are encrypted in the pwhc.ini file on...
Проблемы с Secure Password Authentication в Outlook Express (weak encryption)
Авторизацию в Outlook Expres можно использовать для доступа к корпоративным ресурсам...
Уязвимости в авторизации Yahoo Messanger (weak encryption)
Пароль передается в формате cryp без механизма challenge-response что делает возможным replay-атаки и атаки на перебор...