Password Synchronization DLL built by Thor Technologies
3 years ago
Originally Published: 2004-08-31
Article Number
000060382
Applies To
Microsoft Windows
Password Synchronization DLL
Issue
Password Synchronization DLL built by Thor Technologies
Resolution
Several Issues involving Security of this .DLL is addresses here:

- How closely does it adhere to Microsoft standards?

The .DLL uses Microsoft's standard calls for "password filters". The standard is defined by Microsoft, and defines the interface for the call that has to be followed by the filters for them to work. The installation and format are all based on Microsoft definitions.

- What happens to intercepted password changes? Are they left in memory on the DC for a hacker or to be hijacked?

The .DLL encodes the user and password, and calls a batch file provided by Thor. After that, the memory used by the password is set to zeros, and de-allocated. The only thing left in memory are zeros.

- What happens to intercepted password changes for unknown users?

The change API for Xellerate is called and if the user does not exist, an exception is thrown and it is logged, but nothing happens in Xellerate.

- Are the passwords sent in clear text or are they encrypted or sent in a secure tunnel?

The normal Xellerate API's are called, to the data is sent encrypted to Xellerate.