COMMAND

    SiteServer(SS) & Direct Mail(DM)

SYSTEMS AFFECTED

    SiteServer(SS) 3.0 Direct Mail(DM)

PROBLEM

    'The Hidden' posted following.  When you create a DM job in SS  it
    creates     a     file     at     the     following      location.
    \\Machine\TMLBQueue\Schedule\   The file  is binary  with embedded
    UNICODE text.  If you open  the file with notepad you can  see the
    account name and password that  the job runs under in  clear text.
    The share  is created  when you  install DM  and has everyone full
    control permissions.   The account  that is  in the  file is  most
    likely an  admin, if  not a  domain admin  because SS recommends a
    domain account to be used.

SOLUTION

    Nothing yet.