CVE-2005-0619
bfriendly.com/einstein < 1.0.1 - Plaintext Credential Storage in Registry
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2005-0619. PoCs published by illwill, Kozan.
AI-analyzed exploit summary This exploit reads the username and password stored in plaintext in the Windows Registry by the Einstein v1.01 file-sharing program. It leverages the lack of encoding to extract credentials and display them to the attacker.
Description
Einstein 1.0.1 stores sensitive information such as usernames and passwords in plaintext in the registry, which allows local users to gain privileges.
Exploits (2)
This exploit reads the username and password stored in plaintext in the Windows Registry by the Einstein v1.01 file-sharing program. It leverages the lack of encoding to extract credentials and display them to the attacker.
This exploit reads the username and password stored in plaintext in the Windows Registry by Einstein v1.01, demonstrating an information disclosure vulnerability. It uses the Windows API to query registry values under HKEY_LOCAL_MACHINE\Software\einstein.