Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Alt-N Technologies Mdaemon 5.0 through 5.0.6 uses a weak encryption algorithm to store user passwords, which allows local users to crack passwords.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
MDaemon密码弱加密漏洞
Vulnerability Description
MDaemon是一款集成邮件传输代理,WEBMAIL,邮件防病毒的程序,可使用在Microsoft Windows操作系统下。 MDaemon中密码的加密算法不够强壮,可导致本地用户进行口令恢复攻击。 MDaemon密码默认存放在MDaemon/App目录下的userlist.dat文件中,一般在服务器上路径为C:\MDaemon\App\userlist.dat,MDaemon简单的使用对每个字符基于静态变量的转换并最后进行BASE64编码的方法进行加密,攻击者如果获得加密文件可很容易的恢复密码信息。
CVSS Information
N/A
Vulnerability Type
N/A