Bugtraq mailing list archives

Re: Communicator 4.5 stores EVERY mail-password in preferences.js

From: hdmoore () USA NET (HD Moore)
Date: Wed, 4 Nov 1998 17:33:42 -0600


This is a multi-part message in MIME format.

------=_NextPart_000_0036_01BE0819.444AA5E0
Content-Type: text/plain;
        charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

One more thing I forgot to mention, the password stored in the registry =
is NOT the same as the one stored in prefs.js, but the encryption method =
seems the same.  I wonder if your proxy server logon, news logon, and =
other assorted passwords are stored in the same way...

------=_NextPart_000_0036_01BE0819.444AA5E0
Content-Type: text/html;
        charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD W3 HTML//EN">

<HTML>
<HEAD>

<META content=3Dtext/html;charset=3Diso-8859-1 =
http-equiv=3DContent-Type>
<META content=3D'"MSHTML 4.72.3510.1400"' name=3DGENERATOR>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT color=3D#000000 size=3D2>One more thing I forgot to mention, =
the password=20
stored in the registry is NOT the same as the one stored in prefs.js, =
but the=20
encryption method seems the same.  I wonder if your proxy server =
logon,=20
news logon, and other assorted passwords are stored in the same=20
way...</FONT></DIV></BODY></HTML>

------=_NextPart_000_0036_01BE0819.444AA5E0--

Current thread:

Communicator 4.5 stores EVERY mail-password in preferences.js Holger van Lengerich (Nov 04)
- Re: Communicator 4.5 stores EVERY mail-password in preferences.js Pierre Belanger (Nov 05)
- <Possible follow-ups>
- Re: Communicator 4.5 stores EVERY mail-password in preferences.js HD Moore (Nov 04)
- Re: Communicator 4.5 stores EVERY mail-password in preferences.js HD Moore (Nov 04)