Bugtraq mailing list archives

Passwords in RAM dumps [formally Novell GroupWise Plain Text Password Vulnerability.]


From: "Anything But Microsoft" <abm () anythingbutmicrosoft org>
Date: Mon, 04 Jul 2005 19:19:55 -0400

App after app tested by me here finds my user name and password in memory. Two apps out of fourteen tested stored the 
password in RAM with some type of hash. But I wouldn't be surprised if this was easily translated.

I've only looked at the running process of five apps on Linux so far but have yet to find a password in plain text.

Do we conclude this is a Windows problem? Or are Windows programmers lazy, poorly trained or in general a bunch that 
don't care about security? (like Bill G, expept when convenient and not compromising the monopoly?)




Current thread: