2 results (0.003 seconds)

CVSS: 5.0EPSS: 0%CPEs: 2EXPL: 0

Macromedia Contribute Publishing Server (CPS) before 1.11 uses a weak algorithm to encrypt user password in connection keys that use shared FTP login credentials, which allows attackers to obtain sensitive information. Macromedia Contribute Publishing Server (CPS) anteriores a 1.11 usa un algoritmo de cifrado débil para cifrar contraseñas de usuario en claves de conexión que usan credenciales de inicio de sesión FTP compartido, lo que permite a atacantes obtener información sensible. • http://secunia.com/advisories/17613 http://securitytracker.com/id?1015221 http://www.macromedia.com/devnet/security/security_zone/mpsb05-08.html http://www.securityfocus.com/bid/15438 http://www.vupen.com/english/advisories/2005/2440 https://exchange.xforce.ibmcloud.com/vulnerabilities/23081 •

CVSS: 7.2EPSS: 0%CPEs: 2EXPL: 0

The Macromedia installers and e-licensing client on Mac OS X, as used for Macromedia Contribute 2, Director, Dreamweaver, Fireworks, Flash, and Studio, install the AuthenticationService setuid and writable by other users, which allows local users to gain privileges by modifying the program. • http://secunia.com/advisories/11123 http://www.macromedia.com/devnet/security/security_zone/mpsb04-03.html http://www.securityfocus.com/bid/9862 https://exchange.xforce.ibmcloud.com/vulnerabilities/15465 •