[32792] in bugtraq
Flashget 0.9 - 1.2 Local DialUp Password Hi-Jacking
daemon@ATHENA.MIT.EDU (Rafel Ivgi)
Wed Dec 10 20:45:26 2003
From: "Rafel Ivgi" <nuritrv18@bezeqint.net>
To: <bugtraq@securityfocus.com>
Date: Wed, 10 Dec 2003 21:17:29 +0200
Message-ID: <000301c3bf52$42917bc0$ded2b3d4@fucku>
MIME-Version: 1.0
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: 7bit
Flashget 0.9 - 1.2 Local DialUp Password Hi-Jacking
***************************************************
Discovered by Rafel Ivgi, The-Insider.
http://theinsider.deep-ice.com
(This Is My First Advisory!)
Whenever a user sets flashget to dial-up to the internet he types his
username & password.
This sensitive data is being saved at the registery without no
encryption!.
It saved as hex data at the following location.
[HKEY_USERS\.DEFAULT\Software\JetCar\JetCar\DialUp]
"Entry"="<connection name>"
"UserName"="<dialup username>"
"Password"=hex:'<dialup password'<
