Description
Ozeki HTTP-SMS Gateway 1.0, and possibly earlier, stores usernames and passwords in plaintext in the HKLM\Software\Ozeki\SMSServer\CurrentVersion\Plugins\httpsmsgate registry key, which allows local users to obtain sensitive information.
References
- 21679 vdb-entry
- 23339 third-party-advisory
- ADV-2006-5093 vdb-entry
- http://bb.domaindlx.com/bingung/shellcore/advisories.asp?bug_report=display&infamous_group=106