full-disclosure - Re: Nortel VPN Client Issue: Clear-text password stored in memory

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <42408F5E.6050209@metu.edu.tr>
From: dayioglu at metu.edu.tr (Burak DAYIOGLU)
Subject: Re: Nortel VPN Client Issue: Clear-text password
	stored in memory

Roy,
I read your advisory regarding the Norvel VPN client. If I am not 
mistaken, the authentication keys are stored in the registry hive 
HKEY_CURRENT_USER (per user key stores).

If it is so, you should start the VPN client as the victim user to 
attack the process memory image (or else you have to be administrator).

Am I missing something?

regards,
-bd