Sambar Server Insecure Default Password Protection Vulnerability

Bugtraq ID:	3095
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Jul 25 2001 12:00AM
Updated:	Jul 25 2001 12:00AM
Credit:	Reported to bugtraq by 3APA3A <[email protected]> on July 25, 2001.
Vulnerable:	Sambar Server 5.0 beta5 Sambar Server 5.0 beta4 Sambar Server 5.0 beta3 Sambar Server 5.0 beta2 Sambar Server 5.0 beta1 Sambar Server 4.4 production Sambar Server 4.3 production Sambar Server 4.2.1 production Sambar Server 4.1 production
Not Vulnerable:

Sambar Server Insecure Default Password Protection Vulnerability

Sambar Server is a multi-threaded HTTP server for Microsoft Windows and Unix systems.

Sambar Server provides insecure default protection for user passwords.

The default password decryption algorithm employs only a single key, built into the server binary. If the key is recovered, user passwords may be extracted.

Compromise of the webserver's passwords could allow a local attacker to compromise the website's design and function, obtain confidential or security-sensitive information which could lead to further compromises of the host.

Sambar Server Insecure Default Password Protection Vulnerability

sadecrypt.zip courtesy 3APA3A <[email protected]>

• /data/vulnerabilities/exploits/sadecrypt.zip

Sambar Server Insecure Default Password Protection Vulnerability

Solution:
Reconfigure Sambar to use a non-recoverable password protection format:

In config.ini set
Use Unix crypt = true

Sambar uses non-recoverable DES encryption format.