CVE-1999-1497

This exploit decrypts user passwords stored in the registry by IpSwitch IMail Server <= 8.1 using a weak polyalphabetic Vigenère cipher. It leverages the username as the decryption key to reverse the password hash.

This exploit decrypts weakly encrypted IMail passwords stored in the Windows registry by reversing a custom encryption scheme. It takes an account name and encrypted password as input and outputs the plaintext password.