Exceed 6.0.1.0 saves usernames and passwords in the clear.
8 Dec. 1998
Summary
Hummingbird's Exceed, a program which permits applications, normally available only on expensive UNIX workstations, to be readily accessed by a company's existing Windows NT, Windows 95/98, was found to have a bug, where it stores usernames and passwords inside a textual log file.
One of Exceed's OCXes leaves a log files that was originally intended for debugging purposes only and should have not reached the final version, in the root directory of the computer on which it runs. This log files contains the usernames and password with which Exceed logs on to server.
The bug was fixed in the latest version of the program Exceed 6.1.0.
