VULHUB ™

Tiny WinRoute Pro is a firewall and internet router which enables networked machines to access the internet through a single connection. WinRoute has various features inculding a mail server which is compatible with most common internet protocols. By default, an option called "Use Windows NT logon authentication" is set to "on". This option allows users to retrieve email from the WinRoute POP server using credentials from an NT domain. Unfortunately, all authentication information is recieved by the POP server in cleartext. It is possible for an attacker eavesdropping on network traffic between a user and a POP server to retrieve the POP username and password. Because WinRoute allows NT Domain authentication information to be used, the security of a Windows Network can be compromised if the cleartext POP traffic is intercepted. An attacker could use sniffed Windows domain usernames and passwords to access a Windows network and launch further attacks.

Tiny WinRoute Pro is a firewall and internet router which enables networked machines to access the internet through a single connection. WinRoute has various features inculding a mail server which is compatible with most common internet protocols. By default, an option called "Use Windows NT logon authentication" is set to "on". This option allows users to retrieve email from the WinRoute POP server using credentials from an NT domain. Unfortunately, all authentication information is recieved by the POP server in cleartext. It is possible for an attacker eavesdropping on network traffic between a user and a POP server to retrieve the POP username and password. Because WinRoute allows NT Domain authentication information to be used, the security of a Windows Network can be compromised if the cleartext POP traffic is intercepted. An attacker could use sniffed Windows domain usernames and passwords to access a Windows network and launch further attacks.