Re: exchverify.log

• To: NTBUGTRAQLISTSERV.NTBUGTRAQ.COM
• Subject: Re: exchverify.log
• From: "McGregor, Byron" <BMcGregorBCBC.BC.CA>
• Date: Fri, 13 Nov 1998 09:00:58 -0800
• Approved-By: Russ.CooperRC.ON.CA
• Comments: To: "Byrnes, Jamie" <jamie.byrnesKBJV.COM>
• Reply-To: "McGregor, Byron" <BMcGregorBCBC.BC.CA>
• Sender: Windows NT BugTraq Mailing List <NTBUGTRAQLISTSERV.NTBUGTRAQ.COM>

Yikes!  Thanks for pointing this one out Jamie.  C:\ExchVerify.log is not
related to ArcServe.  It's on our system and we haven't installed ArcServe.
(We use Legato Networker.)  I've noticed this file before but it looked
simply like an Exchange setup/install log file.  Inspecting the details,
you're quite right - there's our Admin username and plaintext password.  (At
least it's on the root of the volume so it's only exposed to admins and
console access - but small comfort there.)  We need to find out who is
building this file and get them to stop with the plaintext admin passwords.

Byron McGregor
B.C. Buildings Corp.
Victoria, B.C., CA

• Prev by Date: Re: REGEDT32.EXE problem and USSP4
• Next by Date: Re: NT DNS cache files hosed\hacked?
• Prev by thread: exchverify.log
• Next by thread: Re: exchverify.log
• Index(es):
  • Date
  • Thread