[9452] in bugtraq
Re: Microsoft Access 97 Stores Database Password as Plaintext
daemon@ATHENA.MIT.EDU (Jim Paris)
Tue Feb 9 19:55:56 1999
Date: Tue, 9 Feb 1999 19:25:42 -0500
Reply-To: Jim Paris <jim@JTAN.COM>
From: Jim Paris <jim@JTAN.COM>
To: BUGTRAQ@NETSPACE.ORG
In-Reply-To: <199902092246.RAA01296@io.jtan.com> from "Jim Paris" at Feb 9,
99 05:46:27 pm
> Minor correction: the passwords can be a maximum of 14 bytes. The last
> XOR value is 0xD8.
Oops, scratch that. As Nate Lawson says,
"Access 97 actually allows a user to enter a 14 char password, although
only the first 13 chars are stored and verified."
-jim
