Re: IpSwitch IMail Server <= ver 8.1 User Password Decryption

To: Adik <netninja@xxxxxxxxxx>
Subject: Re: IpSwitch IMail Server <= ver 8.1 User Password Decryption
From: Dave Warren <dave.warren@xxxxxxxxxxxxxxxxxxxx>
Date: Tue, 17 Aug 2004 04:37:59 -0600
Cc: full-disclosure@xxxxxxxxxxxxxxxx, bugtraq@xxxxxxxxxxxxxxxxx
In-reply-to: <1092676733.4120ec7d5c7c1@xxxxxxxxxxxxxx>
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm
References: <1092676733.4120ec7d5c7c1@xxxxxxxxxxxxxx>
User-agent: Mozilla Thunderbird 0.7.3 (Windows/20040803)

Adik wrote:

IpSwitch IMail Server version up to 8.1 uses weak encryption algorithm toencrypt its user passwords. Have a look at attached proof of concept tool, which will decrypt user password from local machine instantly.

Unfortunately being able to decrypt passwords is absolutely required inorder to support APOP, or SMTP CRAM-MD5 authentication.

With that in mind, this isn't so much a bug, but rather a design flawnecessitated to support the protocols involved.


--
Dave Warren,
Email/MSN MSG:  dave.warren@xxxxxxxxxxxxxxxxxxxx
Phone: (403) 770-6140     Vonage: (817) 886-0860
Cell:  (403) 371-3470  Toll free: (888) 371-3470
ICQ: 17848192                     AIM: devilspgd

References:
- IpSwitch IMail Server <= ver 8.1 User Password Decryption
  - From: Adik

Prev by Date: [ GLSA 200408-17 ] rsync: Potential information leakage
Next by Date: vpopmail <= 5.4.2 (sybase vulnerability)
Previous by thread: IpSwitch IMail Server <= ver 8.1 User Password Decryption
Next by thread: Re: IpSwitch IMail Server <= ver 8.1 User Password Decryption
Index(es):
- Date
- Thread