Exploitation Summary
EIP tracks 2 public exploits for CVE-1999-1497. PoCs published by Adik, Mike Davis.
AI-analyzed exploit summary This exploit decrypts user passwords stored in the registry by IpSwitch IMail Server <= 8.1 using a weak polyalphabetic Vigenère cipher. It leverages the username as the decryption key to reverse the password hash.
Description
Ipswitch IMail 5.0 and 6.0 uses weak encryption to store passwords in registry keys, which allows local attackers to read passwords for e-mail accounts.
Exploits (2)
This exploit decrypts user passwords stored in the registry by IpSwitch IMail Server <= 8.1 using a weak polyalphabetic Vigenère cipher. It leverages the username as the decryption key to reverse the password hash.
This exploit decrypts weakly encrypted IMail passwords stored in the Windows registry by reversing a custom encryption scheme. It takes an account name and encrypted password as input and outputs the plaintext password.