1659 matches found
CVE-2000-0487
The Protected Store in Windows 2000 does not properly select the strongest encryption when available, which causes it to use a default of 40-bit encryption instead of 56-bit DES encryption, aka the "Protected Store Key Length" vulnerability...
Recovering Passwords in Visible Systems' Razor
|-------------- RECOVERING PASSWORDS IN VISIBLE SYSTEMS' RAZOR ---------------| |--------------------------------------------------------------------------- --| |-------------------- Shawn Clifford [email protected] ---------------------| This advisory follows the RFP disclosure policy:...
CVE-2000-0572
The Razor configuration management tool uses weak encryption for its password file, which allows local users to gain privileges...
CVE-2000-0589
SawMill 5.0.21 uses weak encryption to store passwords, which allows attackers to easily decrypt the password and modify the SawMill configuration...
CVE-2000-0449
CVE-2000-0449 : Omnis Studio 2.4 uses weak encryption (trivial encoding) to protect database fields. The provided metrics assign a 10.0 base score (HIGH) with network attack vector and complete impact to confidentiality, integrity, and availability. No exploitation details, specific fixes, or rem...
CVE-2000-0449
Omnis Studio 2.4 uses weak encryption trivial encoding for encrypting database fields...
CVE-2000-0559
eTrust Intrusion Detection System formerly SessionWall-3 uses weak encryption XOR to store administrative passwords in the registry, which allows local users to easily decrypt the passwords...
Computer Associates eTrust Intrusion Detection 1.4.1.13 - Weak Encryption
Computer Associates eTrust Intrusion Detection 1.4.1.13 - Weak Encryption source: https://www.securityfocus.com/bid/1341/info A weak encryption scheme exists in Computer Associates eTrust Intrusion Detection System formerly known as SessionWall-3 password which authorizes users to view and...
Computer Associates eTrust Intrusion Detection 1.4.1.13 - Weak Encryption
source: https://www.securityfocus.com/bid/1341/info A weak encryption scheme exists in Computer Associates eTrust Intrusion Detection System formerly known as SessionWall-3 password which authorizes users to view and configure the application's registry settings. Provided that either a remote or...
CVE-2000-0492
PassWD 1.2 uses weak encryption trivial encoding to store passwords, which allows an attacker who can read the password file to easliy decrypt the passwords...
PassWD 1.2 - Weak Encryption
PassWD 1.2 - Weak Encryption // source: https://www.securityfocus.com/bid/1300/info PassWd 1.2 is a password management utility designed to store user login information to various URLs. The login information, which includes username, password and link location is stored in the pass.dat file which...
PassWD 1.2 - Weak Encryption
// source: https://www.securityfocus.com/bid/1300/info PassWd 1.2 is a password management utility designed to store user login information to various URLs. The login information, which includes username, password and link location is stored in the pass.dat file which resides in the PassWD...
CVE-2000-0487
The Protected Store in Windows 2000 does not properly select the strongest encryption when available, which causes it to use a default of 40-bit encryption instead of 56-bit DES encryption, aka the "Protected Store Key Length" vulnerability...
Omnis Studio 2.4 - Weak Database Field Encryption
Omnis Studio 2.4 - Weak Database Field Encryption source: https://www.securityfocus.com/bid/1255/info Omnis Studio 2.4 is a development tool for creating database applications. The tool gives developers the option to encrypt database entries. However, the encryption scheme used is weak and easily...
CVE-2000-0326
The CVE describes Meeting Maker using a weak polyalphabetic substitution cipher for passwords, enabling remote attackers to sniff and decrypt Meeting Maker account passwords. Technical detail confirms the affected component is the password handling mechanism (encryption scheme) but does not speci...
CVE-2000-0449
Omnis Studio 2.4 uses weak encryption trivial encoding for encrypting database fields...
CVE-2000-0300
The CVE refers to PcAnywhere 9.x where the default encryption method is weak, enabling remote attackers to sniff and decrypt PcAnywhere or NT domain accounts. Affected software: PcAnywhere 9.x (default encryption). Root cause: use of weak default encryption in the authentication pathway. Impact: ...
CVE-2000-0275
CRYPTOCard CryptoAdmin for PalmOS uses weak encryption to store a user PIN in the .PDB. An attacker with access to the .PDB can crack the PIN and generate valid PT-1 tokens. Affected product: CryptoAdmin for PalmOS. Root cause: weak PIN storage encryption. Impact: local attacker could access toke...