PDAapps Verichat for Pocket PC 1.30bh stores usernames and passwords in plaintext in the Windows Mobile registry, which allows local users to obtain sensitive information via keys under HKEY_CURRENT_USERSoftwarePDAappsVeriChat.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Pocket_pc | Pocket_pc | 1.30bh (including) | 1.30bh (including) |
References
- http://airscanner.com/security/05081201_verichat.htm
- http://securityreason.com/securityalert/1504
- http://securitytracker.com/id?1016786
- http://www.securityfocus.com/archive/1/445086/100/0/threaded
- http://airscanner.com/security/05081201_verichat.htm
- http://securityreason.com/securityalert/1504
- http://securitytracker.com/id?1016786
- http://www.securityfocus.com/archive/1/445086/100/0/threaded