[Full-Disclosure] Re: IRCXpro 1.0 - Clear local and default remote admin passwords]

[northern snowfall]

>Then in this case this would be an operating system vulnerability.
>
>Overuse in the use of encrypted passwords can be counter productive to
>functionality.
>There are good reasons to keep passwords clear text passwords to better
>interface with other software.
>For example Merak Mail server software
>(http://www.icewarp.com/Products/Merak_Email_Server_Software/)
>When using this mail server, it can store the accounts on an SQL Server.
>The passwords are stored clear text.  This enables other software to
>interface with its data to create and sync its accounts/passwords with other
>systems.
>
Wow.

http://deadchildren.org/~north_

>