RE: [Vulnerability] : ProductCart database file can be downloaded remotely

[security snot <booger () unixclan net>]

Hi Justin,

I suggest you check out any password cracking tool sometime, which should
help you understand that even if something is encrypted, it isn't safe to
be in the hands of everyone and their bruteforce cracking tools.

-----------------------------------------------------------
"Whitehat by day, booger at night - I'm the security snot."
- CISSP / CCNA / A+ Certified - www.unixclan.net/~booger/ -
-----------------------------------------------------------

On Sun, 6 Jul 2003, Justin Shin wrote:

> I do not understand why the risk is so high. The credit card #s and password's are all encryprted, no?
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html