Description
Symantec Ghost 7.0 stores usernames and passwords in plaintext in the NGServer\params registry key, which could allow an attacker to gain privileges.
References
- 20020226 RE: Symantec LiveUpdate mailing-list
- 20020301 Re: "Peter Miller" pcmiller61@yahoo.com, 02/26/2002 03:48 AM RE: Symantec mailing-list
- ghost-plaintext-account(8305) vdb-entry
- 4181 vdb-entry