COMMAND

    BackWeb

SYSTEMS AFFECTED

    Dr. Solomon AV using BackWeb

PROBLEM

    Steve Vale found following.  Dr Solomon's will now be distributing
    alert & update notifications to corporate customers using  BackWeb
    to  effectively  "push"  such  notifications  to  their customers.
    Steve downloaded &  installed the BackWeb  client, noting that  it
    required a username & password  for access through a Proxy  server
    (as  per  his  set-up).   Seeing  as  our  Proxy  servers validate
    Internet  access  via  our  NT  accounts  (& as my account carries
    administrator  rights),  he  initially  entered  a dummy account &
    then immediately checked in the registry.  Sure enough, there  was
    my dummy username & password in CLEAR TEXT under

        HKEY_CURRENT_USER\Software\Backweb\Backweb\Communication

SOLUTION

    Next release should fix this.