Vulnerability Assessment & Network Security Forums



If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important.  If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery.


Home >> Browse Vulnerability Assessment Database >> Windows >> CRYPTO-Server LDAP Credentials Disclosure Vulnerability


Vulnerability Assessment Details

CRYPTO-Server LDAP Credentials Disclosure Vulnerability

Vulnerability Assessment Summary
Checks for LDAP credentials left by InstallAnywhere

Detailed Explanation for this Vulnerability Assessment

Summary :

The remote Windows host is affected by an information disclosure
issue.

Description :

A version of CRYPTOCard CRYPTO-Server, the server component of a
commercial two-factor authentication system, is installed on the
remote host.

When CRYPTO-Server was installed on the remote host, the installer
left credentials used to configure the application with Active
Directory in a log file, which by default is readable by anyone with
local access.

Solution :

Change the credentials used by CRYPTO-Server for Active Directory and
JDBC.

Network Security Threat Level:

Low / CVSS Base Score : 1.6
(AV:L/AC:L/Au:NR/C:P/I:N/A:N/B:N)

Networks Security ID: 21305

Vulnerability Assessment Copyright: This script is Copyright (C) 2006 Tenable Network Security

Cables, Connectors


A-Tech 8GB DDR3 1600 PC3-12800 Laptop SODIMM 204-Pin Memory RAM PC3L DDR3L 1x 8G picture

A-Tech 8GB DDR3 1600 PC3-12800 Laptop SODIMM 204-Pin Memory RAM PC3L DDR3L 1x 8G

$11.99



Samsung 8GB 2Rx8 PC3-12800 DDR3 1600 MHz 1.5V Non-ECC DIMM Desktop Memory RAM 8G picture

Samsung 8GB 2Rx8 PC3-12800 DDR3 1600 MHz 1.5V Non-ECC DIMM Desktop Memory RAM 8G

$9.99



Team T-FORCE VULCAN Z 16GB (2 x 8GB) DDR4 3200 PC Ram Intel XMP 2.0 Memory picture

Team T-FORCE VULCAN Z 16GB (2 x 8GB) DDR4 3200 PC Ram Intel XMP 2.0 Memory

$27.99



Samsung 16GB 2x8 GB DDR3L 1600 MHz PC3L-12800S SO-DIMM Laptop Memory 1.35V 8G US picture

Samsung 16GB 2x8 GB DDR3L 1600 MHz PC3L-12800S SO-DIMM Laptop Memory 1.35V 8G US

$18.85



A-Tech 8GB PC3-12800 Desktop DDR3 1600 MHz Non ECC 240-Pin DIMM Memory RAM 1x 8G picture

A-Tech 8GB PC3-12800 Desktop DDR3 1600 MHz Non ECC 240-Pin DIMM Memory RAM 1x 8G

$11.99



Crucial DDR3L 16GB 1600 2x 8GB PC3-12800 Laptop SODIMM Memory RAM PC3 16G DDR3 picture

Crucial DDR3L 16GB 1600 2x 8GB PC3-12800 Laptop SODIMM Memory RAM PC3 16G DDR3

$10.95



HyperX FURY DDR3 16GB 32GB 1600MHz 1866MHZ  Desktop RAM Memory DIMM 240pins 1.5V picture

HyperX FURY DDR3 16GB 32GB 1600MHz 1866MHZ Desktop RAM Memory DIMM 240pins 1.5V

$15.00



SK Hynix 16GB 1Rx8 PC4-3200AA DDR4  Laptop Memory / HMAA2GS6CJR8N-XN picture

SK Hynix 16GB 1Rx8 PC4-3200AA DDR4 Laptop Memory / HMAA2GS6CJR8N-XN

$19.99



Sandisk 8GB 16GB 32GB 64GB 128GB Cruzer Blade Flash Drive Memory Stick USB Lot picture

Sandisk 8GB 16GB 32GB 64GB 128GB Cruzer Blade Flash Drive Memory Stick USB Lot

$79.99



Lot of 50 4GB DDR4 Memory PC4-3200 SODIMM Laptop RAM 3200MHz  (MIX BRAND) picture

Lot of 50 4GB DDR4 Memory PC4-3200 SODIMM Laptop RAM 3200MHz (MIX BRAND)

$189.99



Discussions

No Discussions have been posted on this vulnerability.