Vulnerabilities > Inadequate Encryption Strength

DATE CVE VULNERABILITY TITLE RISK
2002-12-31 CVE-2002-1872 Inadequate Encryption Strength vulnerability in Microsoft SQL Server
Microsoft SQL Server 6.0 through 2000, with SQL Authentication enabled, uses weak password encryption (XOR), which allows remote attackers to sniff and decrypt the password.
network
low complexity
microsoft CWE-326
7.5
2002-12-31 CVE-2002-1739 Inadequate Encryption Strength vulnerability in Mdaemon 5.0/5.0.6
Alt-N Technologies Mdaemon 5.0 through 5.0.6 uses a weak encryption algorithm to store user passwords, which allows local users to crack passwords.
local
low complexity
mdaemon CWE-326
5.5
2002-12-31 CVE-2002-1697 Inadequate Encryption Strength vulnerability in Vtun Project Vtun 2.0/2.5
Electronic Code Book (ECB) mode in VTun 2.0 through 2.5 uses a weak encryption algorithm that produces the same ciphertext from the same plaintext blocks, which could allow remote attackers to gain sensitive information.
network
low complexity
vtun-project CWE-326
7.5
2002-12-31 CVE-2002-1682 Inadequate Encryption Strength vulnerability in Daansystems Newsreactor 1.0
NewsReactor 1.0 uses a weak encryption scheme, which could allow local users to decrypt the passwords and gain access to other users' newsgroup accounts.
local
low complexity
daansystems CWE-326
5.5
2001-12-31 CVE-2001-1546 Inadequate Encryption Strength vulnerability in Mckesson Pathways Homecare 6.5
Pathways Homecare 6.5 uses weak encryption for user names and passwords, which allows local users to gain privileges by recovering the passwords from the pwhc.ini file.
local
low complexity
mckesson CWE-326
7.8