The OpenNET Project
 
Search (keywords):  SOFT ARTICLES TIPS & TRICKS SECURITY
LINKS NEWS MAN DOCUMENTATION


Sambar Server password decryption


<< Previous INDEX Search src Set bookmark Go to bookmark Next >>
Date: Wed, 25 Jul 2001 17:45:21 +0400
From: 3APA3A <[email protected]>
To: [email protected]
Subject: Sambar Server password decryption

------------E3FE5D17676763
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit

Hello bugtraq,

Sambar Server (Web/Mail/Proxy for Windows) by default stores
password  encrypted  with blowfish with static built-in key.
(Documentation  states  passwords  can't  be  recovered  but
server  recovers passwords for some needs). There is no even
need  to  discover  this  key  because  Sambar  has decoding
procedure  inside.  Attached  is  simple  program  to launch
decoding.   Copy  it to Sambar's /bin and treat is as a tool
to recover forgotten passwords :)

In config.ini you can set
 Use Unix crypt = true
to make Sambar use crypt()-like non-recoverable DES format.

If  someone  needs  formal  advisory,  it  can  be  found at
http://www.security.nnov.ru/advisories/sambarpass.asp

-- 
http://www.security.nnov.ru
         /\_/\
        { . . }     |\
+--oQQo->{ ^ }<-----+ \
|  3APA3A  U  3APA3A   }
+-------------o66o--+ /
                    |/
You know my name - look up my number (The Beatles)
------------E3FE5D17676763
Content-Type: application/x-zip-compressed; name="sadecrypt.zip"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="sadecrypt.zip"
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------------E3FE5D17676763--


<< Previous INDEX Search src Set bookmark Go to bookmark Next >>



Партнёры:
PostgresPro
Inferno Solutions
Hosting by Hoster.ru
Хостинг:

Закладки на сайте
Проследить за страницей
Created 1996-2025 by Maxim Chirkov
Добавить, Поддержать, Вебмастеру