DeskSoft CheckMail 1.2 - Password Disclosure

QQ空间 新浪微博 微信 QQ facebook twitter
漏洞ID 1054105 漏洞类型
发布时间 2003-08-19 更新时间 2003-08-19
CVE编号 N/A CNNVD-ID N/A
漏洞平台 Windows CVSS评分 N/A
|漏洞来源
https://www.exploit-db.com/exploits/23041
|漏洞详情
漏洞细节尚未披露
|漏洞EXP
source: http://www.securityfocus.com/bid/8449/info

It has been reported that a password disclosure issue exists in CheckMail allowing a local user to access sensitive authentication information through the Windows Registry. The software stores user authentication credentials in a Windows Registry that can be viewed by a local user in order to steal e-mail passwords.

This issue could lead to further attacks as a malicious user may gather sensitive data through user e-mails.

It should be noted that the issue has been reported in CheckMail v1.2, however older versions may be vulnerable as well.

Windows Registry key used to store passwords:

HKEY_USERS\S-1-5-21-823518204-436374069-1708537768-1004\Software\DeskSoft\CheckMail