Description
RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x store passwords in cleartext under adm_b_db\users\, which allows local users to obtain sensitive information by reading a database.
References
- http://secunia.com/secunia_research/2012-8/
- 52929 vdb-entry
- 1026898 vdb-entry
- 20120409 Secunia Research: RealNetworks Helix Server Credentials Disclosure Security Issue mailing-list
- http://helixproducts.real.com/docs/security/SecurityUpdate04022012HS.pdf
- helix-server-info-disclosure(74673) vdb-entry