[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Full-disclosure] Security issue in Filezilla 3.0.9.2:passwords are stored in plain text (sitemanager.xml)



Valdis,

On Fri, 18 Apr 2008 16:24:13 -0400 Valdis.Kletnieks@xxxxxx wrote:

>      3.4.3.  COMPRESSED MODE
>
>         There are three kinds of information to be sent:  regular 
>data,
>         sent in a byte string; compressed data, consisting of
>         replications or filler; and control information, sent in 
>a
>         two-byte escape sequence.  If n>0 bytes (up to 127) of 
>regular
>         data are sent, these n bytes are preceded by a byte with 
>the
>         left-most bit set to 0 and the right-most 7 bits 
>containing the
>         number n.
>
>If you think run-length-encoding compression is security, you're 
>even less
>clued than I thought.

My mistake, I meant 4.3.3.

J

--
Click here for the latest quotes on bankruptcy refinancing!
http://tagline.hushmail.com/fc/Ioyw6h4fRnroSLsvHrCYtJ9JDLtdNw4IP7N4gbgWgeI5CYmB23TeUw/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/