[18692] in cryptography@c2.net mail archive
Cisco VPN password recovery program
daemon@ATHENA.MIT.EDU (Perry E. Metzger)
Wed Oct 19 10:41:54 2005
X-Original-To: cryptography@metzdowd.com
X-Original-To: cryptography@metzdowd.com
To: cryptography@metzdowd.com
From: "Perry E. Metzger" <perry@piermont.com>
Date: Wed, 19 Oct 2005 10:29:19 -0400
Via cryptome:
http://evilscientists.de/blog/?page_id=343
The Cisco VPN Client uses weak encryption to store user and group
passwords in your local profile file. I coded a little tool to
reveal the saved passwords from a given profile file.
If this is true, it doesn't sound like Cisco used a particularly smart
design for this.
--
Perry E. Metzger perry@piermont.com
---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo@metzdowd.com
