Title: Microsoft Plus! 98 Windows ME Password Disclosure Vulnerability
Severity: LOW
Description:
Plus! 98 is an add on package by Microsoft for Windows 98 and includes numerous add-on features. One feature called Compressed Folders enables the user to password-protect compressed folders. This feature was implemented in Windows ME.
Due to a flaw in the implementation of the Compressed Folders feature in Microsoft Plus! 98 and Windows ME, the password used to protect the compressed folder is stored on the user's machine in plaintext. A user who gains access to a machine with this feature installed could locate the file where the password is stored and use it to access any compressed folder and the contents within the folder.
Successful exploitation could allow a local intruder to gain full access to any compressed folder and file.
Affected Products:
- Microsoft Plus! 98 0.0.0
- Microsoft Windows ME
References:
- Microsoft: Microsoft Security Bulletin (MS01-019)
Juniper Networks provides this content via a wide variety of sources and production methods. If notified of errors or omissions in the content of this page, Juniper Networks, at its discretion, will modify or remove the page or leave the content as is, depending on various factors including but not limited to the reputation and authority of the party providing the notification. Please use the contact information displayed elsewhere on this page to report any errors or omissions regarding the content on this page.
