DeskSoft CheckMail Password Disclosure Vulnerability
BID:8449
Info
DeskSoft CheckMail Password Disclosure Vulnerability
| Bugtraq ID: | 8449 |
| Class: | Design Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Aug 19 2003 12:00AM |
| Updated: | Aug 19 2003 12:00AM |
| Credit: | The disclosure of this issue has been credited to cyber talon <[email protected]>. |
| Vulnerable: |
DeskSoft CheckMail 1.2 |
| Not Vulnerable: | |
Discussion
DeskSoft CheckMail Password Disclosure Vulnerability
It has been reported that a password disclosure issue exists in CheckMail allowing a local user to access sensitive authentication information through the Windows Registry. The software stores user authentication credentials in a Windows Registry that can be viewed by a local user in order to steal e-mail passwords.
This issue could lead to further attacks as a malicious user may gather sensitive data through user e-mails.
It should be noted that the issue has been reported in CheckMail v1.2, however older versions may be vulnerable as well.
It has been reported that a password disclosure issue exists in CheckMail allowing a local user to access sensitive authentication information through the Windows Registry. The software stores user authentication credentials in a Windows Registry that can be viewed by a local user in order to steal e-mail passwords.
This issue could lead to further attacks as a malicious user may gather sensitive data through user e-mails.
It should be noted that the issue has been reported in CheckMail v1.2, however older versions may be vulnerable as well.
Exploit / POC
DeskSoft CheckMail Password Disclosure Vulnerability
The following proof of concept has been provided:
Windows Registry key used to store passwords:
HKEY_USERS\S-1-5-21-823518204-436374069-1708537768-1004\Software\DeskSoft\CheckMail
The following proof of concept has been provided:
Windows Registry key used to store passwords:
HKEY_USERS\S-1-5-21-823518204-436374069-1708537768-1004\Software\DeskSoft\CheckMail
Solution / Fix
DeskSoft CheckMail Password Disclosure Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.