full-disclosure - Re: IRCXpro 1.0 - Clear local and default remote admin passwords]

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <3EDCD731.3090103@ameritech.net>
From: dbailey27 at ameritech.net (northern snowfall)
Subject: Re: IRCXpro 1.0 - Clear local and default remote admin passwords]

>Then in this case this would be an operating system vulnerability.
>
>Overuse in the use of encrypted passwords can be counter productive to
>functionality.
>There are good reasons to keep passwords clear text passwords to better
>interface with other software.
>For example Merak Mail server software
>(http://www.icewarp.com/Products/Merak_Email_Server_Software/)
>When using this mail server, it can store the accounts on an SQL Server.
>The passwords are stored clear text.  This enables other software to
>interface with its data to create and sync its accounts/passwords with other
>systems.
>
Wow.

http://deadchildren.org/~north_

>