[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: A Major design Bug in Steganography 1.7.x, 1.8 (latest) (Updated Version)

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: Re: A Major design Bug in Steganography 1.7.x, 1.8 (latest) (Updated Version)
From: "Dave \"No, not that one\" Korn" <davek_throwaway@xxxxxxxxxxx>
Date: Thu, 11 Jan 2007 01:32:16 -0000

thesinoda@xxxxxxxxxxx wrote:

> very easy, in fact in less than two minute. The problem is similar to
> the bug I found in PGP last year.

  The bug you did *NOT* find in PGP last year.  All you did was bypass a 
sanity check and show that you could decrypt a file with the wrong password 
and get garbage.

    cheers,
      DaveK
-- 
Can't think of a witty .sigline today....

References:
- A Major design Bug in Steganography 1.7.x, 1.8 (latest) (Updated Version)
  - From: thesinoda

Prev by Date: DMA[2007-0107a] OmniWeb Javascript Alert Format String Vulnerabiity and DMA[2007-0109a] Apple Finder Disk Image Volume Label Overflow / DoS
Next by Date: [ MDKSA-2007:007 ] - Updated nvidia driver packages fix vulnerability
Previous by thread: A Major design Bug in Steganography 1.7.x, 1.8 (latest) (Updated Version)
Next by thread: Re: A Major design Bug in Steganography 1.7.x, 1.8 (latest) (Updated Version)
Index(es):
- Date
- Thread