IObit Protected Folder Authentication Bypass

["Adam Behnke" <adam () infosecinstitute com>]

> From IObit: "Protected Folder is designed to password-protect your folders
and files from being seen, read or modified in Windows 7, Vista, XP and
Server 2008, 2003. It works like a safety box, just drag and drop the
folders or files you want to hide or protect into Protected Folder, then no
one can see, read or modify them. Whether you are concerned with privacy,
data theft, data loss, or data leaks, Protected Folder is an ideal tool for
you."

Some simple bit flipping of the return value from password checking function
allows anyone to bypass the security of this product:
http://resources.infosecinstitute.com/iobit-bypass/




_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/