Meeting Maker uses weak encryption (a polyalphabetic substitution cipher) for passwords, which allows remote attackers to sniff and decrypt passwords for Meeting Maker accounts.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Meeting_maker | On_technology | 1.0 (including) | 1.0 (including) |
| Meeting_maker | On_technology | 2.0 (including) | 2.0 (including) |
| Meeting_maker | On_technology | 3.0 (including) | 3.0 (including) |
| Meeting_maker | On_technology | 4.0 (including) | 4.0 (including) |
| Meeting_maker | On_technology | 5.0 (including) | 5.0 (including) |
| Meeting_maker | On_technology | 6.0 (including) | 6.0 (including) |
References
- http://support.on.com/support/mmxp.nsf/31af51e08bcc93eb852565a90056138b/11af70407a16b165852568c50056a952?OpenDocument
- http://www.securityfocus.com/bid/1151
- http://support.on.com/support/mmxp.nsf/31af51e08bcc93eb852565a90056138b/11af70407a16b165852568c50056a952?OpenDocument
- http://www.securityfocus.com/bid/1151