Win98 and WinMe Passwords for Compressed Folders Are Recoverable

Reported March 28, 2001, by Microsoft.

 

VERSIONS AFFECTED

• Windows 98 with Plus! 98
• Windows Millennium Edition

DESCRIPTION

Windows 98 with Plus! 98 and Windows Millennium Edition (Me) both support a compressed folders option that let the OS define a password to help protect a folder. Because the OS stores the passwords in a file on the system where intruders can access it, the technology is flawed.

VENDOR RESPONSE

Microsoft has issued security bulletin MS01-019 to address this vulnerability. Microsoft has also provided patches that you can download for Windows 98 and Windows Me. 

CREDIT
Discovered by Microsoft