Microsoft Windows Network Monitor Weak Password Encryption Vulnerability

An issue has been reported in Network Monitor, which could allow a user to reveal authentication information.

Reportedly, NetMon stores administration passwords using a weak encryption method in the linked library 'BHSUPP.DLL'. Therefore if an attacker obtains access to 'BHSUPP.DLL' residing on a local system, they may be able to reveal NetMon administration authentication credentials.


 

Privacy Statement
Copyright 2010, SecurityFocus