Pykos
-
2004-11-22
- status: open --> open-accepted
Found that certain characters in a particular position
in the users password gets dropped. Appears that the
strKey in global/XORString will generate a null (\0)
character when xor'd.
Reproducible Example : Eight character password where
the eighth character is a numeric 5.
Enter and select save password, and the user logons
again, only first 7 characters show in the masked
password box.
Simply adding back in the last character (5), allows
the user to login.