Microsoft MN-500 Plaintext Password Disclosure Weakness

Bugtraq ID:	7496
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	May 03 2003 12:00AM
Updated:	May 03 2003 12:00AM
Credit:	Discovery of this issue credited to Paul Kurczaba <[email protected]>.
Vulnerable:	Microsoft MN-500
Not Vulnerable:

Microsoft MN-500 Plaintext Password Disclosure Weakness

A weakness has been reported for the MN-500 device that may result in the disclosure of administrative credentials to remote attackers. Reportedly, the issue exists due to backup configuration files storing administrative passwords in a plaintext format.

Microsoft MN-500 Plaintext Password Disclosure Weakness

There is no exploit required.

Microsoft MN-500 Plaintext Password Disclosure Weakness

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Microsoft MN-500 Plaintext Password Disclosure Weakness

References:

• Wireless Base Station MN-500 (Microsoft)