[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Passwords in RAM dumps [formally Novell GroupWise Plain Text Password Vulnerability.]
- To: "<@securityfocus.com BUGTRAQ" <BUGTRAQ@xxxxxxxxxxxxxxxxx>, <securityteam@xxxxxxxxxxxx>
- Subject: Passwords in RAM dumps [formally Novell GroupWise Plain Text Password Vulnerability.]
- From: "Anything But Microsoft" <abm@xxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Mon, 04 Jul 2005 19:19:55 -0400
App after app tested by me here finds my user name and password in memory. Two
apps out of fourteen tested stored the password in RAM with some type of hash.
But I wouldn't be surprised if this was easily translated.
I've only looked at the running process of five apps on Linux so far but have
yet to find a password in plain text.
Do we conclude this is a Windows problem? Or are Windows programmers lazy,
poorly trained or in general a bunch that don't care about security? (like Bill
G, expept when convenient and not compromising the monopoly?)