CVE-2003-0340
Published May 21, 2003Demarc Puresecure 1.6 stores authentication information for the logging server in plaintext, which allows attackers to steal login names and passwords to gain privileges.
Vendor/product archive
2 CVEs tagged to demarc_security / puresecure — 1 Critical, 1 High, 0 Medium, 0 Low, 0 Unrated.
Demarc Puresecure 1.6 stores authentication information for the logging server in plaintext, which allows attackers to steal login names and passwords to gain privileges.
Demarc PureSecure 1.05 allows remote attackers to gain administrative privileges via a SQL injection attack in a session ID that is stored in the s_key cookie.