Pathways Homecare 6.5 uses weak encryption for user names and passwords, which allows local users to gain privileges by recovering the passwords from the pwhc.ini file.Referenceshttp://www.iss.net/security_center/static/7682.phphttp://www.securityfocus.com/bid/3653http://www.securityfocus.com/archive/1/244367