[9545] in bugtraq
Re: Microsoft Access 97 Stores Database Password as Plaintext
daemon@ATHENA.MIT.EDU (Michael Nelson)
Fri Feb 12 23:52:27 1999
Date: Fri, 12 Feb 1999 12:53:31 -0500
Reply-To: Michael Nelson <mikenel@IAPETUS.COM>
From: Michael Nelson <mikenel@IAPETUS.COM>
X-To: Will Cox <Will_Cox@IMAGEINC.COM>
To: BUGTRAQ@NETSPACE.ORG
In-Reply-To: <85256713.006BC395.00@eidolon.imageinc.com>
Access doesn't use Structured Storage for its databases like Excel and
Word do for their file formats.
-mike
On Tue, 9 Feb 1999, Will Cox wrote:
> On Mon, 8 Feb 1999 sozni@USA.NET wrote:
> > The problem is that Access allocates the the space it needs for its tables
> > but until used, that space will contain whatever used to be on those
> > sectors on the hard drive.
>
> Sounds like a problem with the OLE/COM rather than Access to me.
>
> http://support.microsoft.com/support/kb/articles/q139/4/32.asp
> http://www1.macintouch.com/o98security.html
> http://support.microsoft.com/support/kb/articles/q189/3/76.asp
>
> But that doesn't seem to have much bearing on the password storage.
>
> /cwc
>
