Re: Communicator 4.5 stores EVERY mail-password in preferences.js

From: HD Moore (hdmooreat_private)
Date: Wed Nov 04 1998 - 15:33:42 PST

  • Next message: Davin Milun: "Re: ISS Security Advisory: Hidden community string in SNMP"

    This is a multi-part message in MIME format.
    
    ------=_NextPart_000_0036_01BE0819.444AA5E0
    Content-Type: text/plain;
            charset="iso-8859-1"
    Content-Transfer-Encoding: quoted-printable
    
    One more thing I forgot to mention, the password stored in the registry =
    is NOT the same as the one stored in prefs.js, but the encryption method =
    seems the same.  I wonder if your proxy server logon, news logon, and =
    other assorted passwords are stored in the same way...
    
    ------=_NextPart_000_0036_01BE0819.444AA5E0
    Content-Type: text/html;
            charset="iso-8859-1"
    Content-Transfer-Encoding: quoted-printable
    
    <!DOCTYPE HTML PUBLIC "-//W3C//DTD W3 HTML//EN">
    <HTML>
    <HEAD>
    
    <META content=3Dtext/html;charset=3Diso-8859-1 =
    http-equiv=3DContent-Type>
    <META content=3D'"MSHTML 4.72.3510.1400"' name=3DGENERATOR>
    </HEAD>
    <BODY bgColor=3D#ffffff>
    <DIV><FONT color=3D#000000 size=3D2>One more thing I forgot to mention, =
    the password=20
    stored in the registry is NOT the same as the one stored in prefs.js, =
    but the=20
    encryption method seems the same.&nbsp; I wonder if your proxy server =
    logon,=20
    news logon, and other assorted passwords are stored in the same=20
    way...</FONT></DIV></BODY></HTML>
    
    ------=_NextPart_000_0036_01BE0819.444AA5E0--
    



    This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 14:22:13 PDT