RE: [Full-Disclosure] IpSwitch IMail Server <= ver 8.1 User Password Decryption

[Bill Roemhild]

This has been well documented. I remember a tool from 2002 that would
decrypt the hash from command line. =20

printf ("IMail Password Decryptor\n");
printf ("Usage: %s <account name> <encrypted string>\n", name);
printf ("E.g., %s crypto CCE5DFE5E2\n
^^^^^^^^^^---CAPITAL LETTERS\n\n", name);
printf ("This information is found in the registry at:\n
HKEY_LOCAL_MACHINE\\SOFTWARE\\Ipswitch\\IMail\\Dom ains\n");

Bill

-----Original Message-----
From: full-disclosure-admin@lists.netsys.com
[mailto:full-disclosure-admin@lists.netsys.com] On Behalf Of Adik
Sent: Monday, August 16, 2004 10:19 AM
To: full-disclosure@lists.netsys.com
Cc: bugtraq@securityfocus.com
Subject: [Full-Disclosure] IpSwitch IMail Server <=3D ver 8.1 User
Password Decryption

Hi fellaz,

IpSwitch IMail Server version up to 8.1 uses weak encryption algorithm
to=20
encrypt its user passwords. Have a look at attached proof of concept
tool,=20
which will decrypt user password from local machine instantly.

---

[Jérôme ATHIAS]

In-Reply-To: <1092676733.4120ec7d5c7c1@www.hotmail.kg>

You could be interested by the new Luigi Auriemma's tools :

Ipswitch Ws FTP client passwords decoder 0.1
IpSwitch Notification server passwords decoder 0.1
IpSwitch Instant Messaging server passwords decoder 0.1
IpSwitch Instant Messaging client last password decoder 0.1

have a nice trip on http://aluigi.altervista.org/pwdrec.htm

Enjoy!

[David E. Smith]

On Mon, 16 Aug 2004, Adik wrote:

> IpSwitch IMail Server version up to 8.1 uses weak encryption algorithm to
> encrypt its user passwords. Have a look at attached proof of concept tool,
> which will decrypt user password from local machine instantly.

Heck, this isn't even news. It was posted to Bugtraq a while back. Like
1999. This URL details Imail's password scheme for Imail 5.0:

http://seclists.org/bugtraq/1999/Dec/0255.html

About a year ago, I found that article, and used it to "decrypt" a few
lost email passwords on my Imail 7.15 installation.

Given the fact that Imail tries to do just about everything (it does POP3,
SMTP, IMAP, LDAP, includes a Web server and makes crispy French fries),
this sort of thing is probably bound to stay around for a while.

One of the neat things about Imail (other than that it does practically
everything) is that it's backwards-compatible. If my Imail 8.1x
installation does something weird, I can roll it back to Imail 7.x with
maybe fifteen minutes' work. This level of backwards compatibility does
lead to weird problems and security issues (q.v. every version of DOS and
Windows for about fifteen years).

....dave