• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

DaanSystems NewsReactor Password Encoding Vulnerability

NewsReactor is a shareware program distributed by DaanSystems. It is available for the Microsoft Windows platform.

When NewsReactor is configured, it saves news server configuration information to the NewsReactor.ini file. The password to access a news server is stored insecurely, using a slide-rule encoding technique. When the password is saved to the NewsReactor.ini file, it is encoded using a format that involves moving 64 characters up the ASCII table.