Exploitation Summary
EIP tracks 2 public exploits for CVE-2000-0572. PoCs published by pbw, Shawn A. Clifford.
AI-analyzed exploit summary This exploit demonstrates how the Razor Configuration Management program stores passwords insecurely, allowing a local attacker to decode and retrieve plaintext passwords from the system. The code includes functions to decrypt stored passwords or encrypt new ones using a simple rotation cipher.
Description
The Razor configuration management tool uses weak encryption for its password file, which allows local users to gain privileges.
Exploits (2)
This exploit demonstrates how the Razor Configuration Management program stores passwords insecurely, allowing a local attacker to decode and retrieve plaintext passwords from the system. The code includes functions to decrypt stored passwords or encrypt new ones using a simple rotation cipher.
This Perl script decrypts and encrypts passwords stored by the Razor Configuration Management program, which uses a weak cipher (bit rotation). It can process a password file to reveal plaintext credentials or generate ciphertext from plaintext.