[24429] in bugtraq
RE: Symantec LiveUpdate
daemon@ATHENA.MIT.EDU (Calanan, Michael)
Tue Feb 26 20:26:40 2002
content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain;
charset="iso-8859-1"
Date: Tue, 26 Feb 2002 13:54:59 -0500
Message-ID: <71F7F2494BBCE14392FC79B8F5CD235507325C@biloxi.gog.org>
From: "Calanan, Michael" <calanan@gogstats.org>
To: <pcmiller61@yahoo.com>, "Javier Sanchez" <jsanchez157@hotmail.com>,
<bugtraq@securityfocus.com>
Content-Transfer-Encoding: 8bit
Confirmed to exist in Ghost 7.5.0.335 on a Windows 2000 server.
> -----Original Message-----
> From: Peter Miller [mailto:pcmiller61@yahoo.com]
> Sent: Tuesday, 26 February 2002 04:48 AM
> To: Javier Sanchez; bugtraq@securityfocus.com
> Subject: RE: Symantec LiveUpdate
>
>
> Hi All,
>
> In a similar vien would anyone with Symantec Ghost V7.0
> installed like to
> comment on this key:
>
> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NGServer\params
>
> Ghost creates a special user account on the machine to run
> the service under
> but it seems it is storing the password for this account in
> plain text in
> the registry.
>
> Regards
> Peter
