[13334] in bugtraq
Password issue in Axent ESM 5.0.1 Console
daemon@ATHENA.MIT.EDU (Todd)
Thu Jan 13 16:39:47 2000
Mime-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
Message-Id: <004701bf5d59$ba7ab660$31881a18@columbus.rr.com>
Date: Wed, 12 Jan 2000 19:04:14 -0500
Reply-To: Todd <todd@aggies.org>
From: Todd <thathawa@COLUMBUS.RR.COM>
X-To: bugtraq@securityfocus.com
To: BUGTRAQ@SECURITYFOCUS.COM
Axent's latest release of its ESM product was redesigned and supposedly
revamped around it's new "Management Console". The new management console
is based on an underlying Access Database. The console is password
protected each time the application is launched. However, when the user
wants to change the console password, the next time the application is
launched the database is inaccessible because the code does not update the
password on the database file. It is reported that contact of Axent
resulted in being told to launch the MS Access DB file and disable password
checking.
