SecurityFocus

A Major design Bug in Steganography 1.7.x, 1.8 (latest) (Updated Version) Jan 07 2007 10:42AM
thesinoda hotmail com (2 replies)

Re: A Major design Bug in Steganography 1.7.x, 1.8 (latest) (Updated Version) Jan 11 2007 10:26AM
hlangos-bugtraq innominate com

Re: A Major design Bug in Steganography 1.7.x, 1.8 (latest) (Updated Version) Jan 11 2007 01:32AM
Dave \No, not that one\ Korn (davek_throwaway hotmail com)

thesinoda (at) hotmail (dot) com [email concealed] wrote:

> very easy, in fact in less than two minute. The problem is similar to
> the bug I found in PGP last year.

The bug you did *NOT* find in PGP last year. All you did was bypass a
sanity check and show that you could decrypt a file with the wrong password
and get garbage.

cheers,
DaveK
--
Can't think of a witty .sigline today....

[ reply ]