Keene Digital Media Server Discloses Files and Passwords to Remote Authenticated Users
Application: Keene Digital Media Server Web Site: http://www.keenesoftware.com/ Versions: 1.0.2 Platform: Windows Bugs: 1) Clear Text Passwords . 2) Directory Traversal . 3) Authorization .
) Introduction 2) Bug 3) The Code 4) Fix
=============== 1) Introduction ===============
Keene Digital Media Server is the easiest way to share or view your library of digital pictures, music, videos or any computer files over the web.
======= 2) Bugs =======
1)
Keene Digital Media Server stores usernames and passwords in clear text under :
\Program Files\Keene Software\Digital Media Server\dmscore.db
3)
Any authenticated user can Perform Administrative Tasks.
