Re: Microsoft Access 97 Stores Database Password as Plaintext

From: Jim Paris (jimat_private)
Date: Tue Feb 09 1999 - 16:25:42 PST

Next message: bugtraq mailing list account: "Re: Netect Advisory: palmetto.ftpd - remote root overflow"

Previous message: RHS Linux User: "SECURITY: new wu-ftpd packages available (fwd)"
Maybe in reply to: Donald Moore (MindRape): "Microsoft Access 97 Stores Database Password as Plaintext"
Next in thread: Paul Leach: "Re: Microsoft Access 97 Stores Database Password as Plaintext"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

> Minor correction: the passwords can be a maximum of 14 bytes.  The last
> XOR value is 0xD8.

Oops, scratch that.  As Nate Lawson says,

"Access 97 actually allows a user to enter a 14 char password, although
only the first 13 chars are stored and verified."

-jim

Next message: bugtraq mailing list account: "Re: Netect Advisory: palmetto.ftpd - remote root overflow"
Previous message: RHS Linux User: "SECURITY: new wu-ftpd packages available (fwd)"
Maybe in reply to: Donald Moore (MindRape): "Microsoft Access 97 Stores Database Password as Plaintext"
Next in thread: Paul Leach: "Re: Microsoft Access 97 Stores Database Password as Plaintext"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 14:33:23 PDT