full-disclosure - SMC Router safe Login in plaintext

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

From: florianrock at web.de (Florian Rock)
Subject: SMC Router safe Login in plaintext

I found that the SMC Barricade SMC-7404BRB safe the Login for the Provider safe in plaintext!!!

If you go to PPPoE and look a the source code you found the password in plaintext.
Here a pic from the HTML site:

If you look at Source you can find the line:
<input type="password" name="p_passwd" size="25" maxlength="60" value="00000000"></font> 
The password is safe in plaintext!!! 00000000 = password in plaintext

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20030903/7c3b6d68/attachment.html
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: image/jpeg
Size: 108266 bytes
Desc: not available
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20030903/7c3b6d68/attachment.jpe