full-disclosure - Re: IRCXpro 1.0 - Clear local and default remote admin passwords]

lists.openwall.net		lists / announce john-users owl-users popa3d-users / xvendor oss-security / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4
Open Source and information security mailing list archives

Order Openwall GNU/*/Linux 2.0 on a CD with delivery worldwide

[<prev] [next>] [month] [year] [list]

From: dbailey27 at ameritech.net (northern snowfall)
Subject: Re: IRCXpro 1.0 - Clear local and default remote admin passwords]

>Then in this case this would be an operating system vulnerability.
>
>Overuse in the use of encrypted passwords can be counter productive to
>functionality.
>There are good reasons to keep passwords clear text passwords to better
>interface with other software.
>For example Merak Mail server software
>(http://www.icewarp.com/Products/Merak_Email_Server_Software/)
>When using this mail server, it can store the accounts on an SQL Server.
>The passwords are stored clear text.  This enables other software to
>interface with its data to create and sync its accounts/passwords with other
>systems.
>
Wow.

http://deadchildren.org/~north_

>