Security News -  Security Reviews -   Exploits -  Tools -  UNIX Focus -  Windows Focus
SecuriTeam™  Beyond Security®  SecuriTeam™ Home  Ask the Team  Mailing Lists  Advertising Info  Blogs  Black Box Testing  Vulnerability Assessment  Vulnerability Scanner SecuriTeam™ in Your Inbox   E-mail this article to a friend New vulnerability? New tool? Tell us	AudioGalaxy Username and Password Saved in Cleartext 8 Dec. 2001    Summary AudioGalaxy is a website devoted to mp3's that offers an mp3 sharing program. This product stores the username and password used by the application in plain text inside a cookie - this enables everyone with access to this cookie to reveal the username and password without much effort.   Credit: The information has been provided by altomo.    Details Audit your web server for security holes - see what the hackers see. Sign up for a scan today - risk free! Sometime ago we released an article about AudioGalaxy keeping usernames and passwords in clear text in a file on the users system. Shortly after that, they fixed it, or so it seemed. AudioGalaxy has started storing username and passwords in cookie. A sample cookie entry looks like this: cookieUsername USERNAMEHERE audiogalaxy.com/ 0 367281152 29529638 3457234544 29456211 * cookiePassword CLEARTEXTPASSHERE audiogalaxy.com The obvious problem is that someone exploiting the recent IE bug and stealing cookies could get the cookie and thus have the username and password. A possible scenario would be to steal the username/password, using AudioGalaxy software set an mp3 for download that the attacker has wrapped with a Trojan. Moreover, since Back orifice does not have to have an .exe extension to infect a victim, the victim would open up an mp3 wanting to enjoy the music but rather they would be infected.  Comments: Subject:   Date:  From:  Add new comment:  Subject:  Name/Nick/Email:          Chars Left:	All Sections Security News Unix focus Exploits Tools Windows focus Security Reviews  Related Articles Cisco BBSM Captive Portal Cross-site Scripting Cisco Unified Communications Manager Denial of Service Vulnerabilities Novell eDirectory Unauthenticated Access to SOAP Interface Call of Duty Denial of Service Wonderware SuiteLink Denial of Service Vulnerability WebMod Multiple Vulnerabilities IAX2 Incomplete 3-Way Handshake (Spoofing) Multiple Vendor OpenOffice Vulnerabilities Apple Safari WebKit PCRE Handling Integer Overflow Vulnerability Cisco Network Admission Control Shared Secret Vulnerability ClamAV libclamav PeSpin Heap Overflow Vulnerability ClamAV libclamav PE WWPack Heap Overflow Vulnerability IBM Informix Pre-Authentication Stack Overflow Adobe Flash Player DeclareFunction2 Invalid Object Use Vulnerability HP OpenView NNM Buffer Overflow  Featured Articles Microsoft Windows I2O Filter Utility Driver (i2omgmt.sys) Local Privilege Escalation Vulnerability Adobe Acrobat Javascript PDF Security Feature Bypass and Memory Corruption Vulnerabilities Multiple Vendor rdesktop Vulnerabilities Wonderware SuiteLink Denial of Service Vulnerability PHP Multibyte Shell Command Escaping Bypass Vulnerability Akamai Download Manager Arbitrary Program Execution Vulnerability SugarCRM Community Edition Local File Disclosure Vulnerability
	Security News - Security Reviews - Exploits - Tools - UNIX Focus - Windows Focus - Blogs - CVEs

Copyright © 1998-2008 Beyond Security® All rights reserved.
Terms of Use Site Privacy Statement.
SecuriTeam™ is a trademark of Beyond Security®