CVE-2007-0163 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2007-0163
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2007-0163

Description: SecureKit Steganography 1.7.1 and 1.8 embeds password information in the carrier file, which allows remote attackers to bypass authentication requirements and decrypt embedded steganography by replacing the last 20 bytes of the JPEG image with alternate password information.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/31378 SAID Secunia Advisory: SA23639 OSVDB 31244 MISC http://homepage.mac.com/adonismac/Advisory/steg/steganography.html BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/456519/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/456283/100/0/threaded

Return to the previous page.