Bugtraq mailing list archives

Netware + Win95 issue

From: mauri () MBP EE (Lauri Laupmaa)
Date: Mon, 7 Apr 1997 11:11:39 +0300


Hi

There seems to be serious security flaw in win95 dealing with novell
netware passwords. It's trivial to find netware password in win95
swap file by just scanning the hard disk for USERNAME (with some disk
editor) The only solution I have found is to disable virtual memory,
but this is not a SOLUTION, because lot of programs just do not work
without it...

btw. I'm talking about MS netware client (not aware if this flaw is
present in Novell client32)

______________
Lauri Laupmaa
mauri () mbp ee
Ph. +372 6 505 127
    +372 5 013 369

Current thread:

Password problem in Trumpet Winsock. null (Apr 06)
- Linux - buffer overflow in filter Mikhail Iakovlev (Apr 06)
- Re: Password problem in Trumpet Winsock. John Sheehy (Apr 06)
- Re: Password problem in Trumpet Winsock. Michael Douglass (Apr 07)
- Netware + Win95 issue Lauri Laupmaa (Apr 07)
  - Re: Netware + Win95 issue Paul Melson (Apr 08)
- Another one javascript exploit attempt? Andrew V. Kovalev (Apr 07)
- DUMP of NT system crash Vytautas Vysniauskas (Apr 07)
- Re: Password problem in Trumpet Winsock. Paul Melson (Apr 07)
- BoS: /etc/default/login LOCKOUT= creates arbitrary files (fwd) Illuminati Primus (Apr 07)
  - Re: BoS: /etc/default/login LOCKOUT= creates arbitrary files (f Eugene Bradley (Apr 08)
- FreeBSD Security Advisory: FreeBSD-SA-97:03.sysinstall Aleph One (Apr 07)
- CERT Advisory CA-97.09 - Vulnerability in IMAP and POP Aleph One (Apr 07)
- [linux-security] amd 920824upl102 ignores the nodev option Aleph One (Apr 08)