Full Disclosure mailing list archives

Re: IRCXpro 1.0 - Clear local and default remote admin passwords]


From: northern snowfall <dbailey27 () ameritech net>
Date: Tue, 03 Jun 2003 12:13:21 -0500

Then in this case this would be an operating system vulnerability.

Overuse in the use of encrypted passwords can be counter productive to
functionality.
There are good reasons to keep passwords clear text passwords to better
interface with other software.
For example Merak Mail server software
(http://www.icewarp.com/Products/Merak_Email_Server_Software/)
When using this mail server, it can store the accounts on an SQL Server.
The passwords are stored clear text.  This enables other software to
interface with its data to create and sync its accounts/passwords with other
systems.

Wow.

http://deadchildren.org/~north_




_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: