NVD

Id
52394  
Name
CVE-2007-0163  
Description
SecureKit Steganography 1.7.1 and 1.8 embeds password information in the carrier file, which allows remote attackers to bypass authentication requirements and decrypt embedded steganography by replacing the last 20 bytes of the JPEG image with alternate password information.  
Reject
 
CVSS Version
2  
CVSS Score
7.8  
Severity
High  
CVSS Base Score
7.8  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:N/A:N)  
Pub Date
2017-01-07  
Published
2007-01-09  
Modified Date
2008-11-15  
Seq
2007-0163  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
264665 52394 CVE-2007-0163 http://homepage.mac.com/adonismac/Advisory/steg/steganography.html  View
264666 52394 CVE-2007-0163 20070106 Cracking Steganography Application in less than ONE minute  View
264667 52394 CVE-2007-0163 20070107 A Major design Bug in Steganography 1.7.x, 1.8 (latest) (Updated Version)  View
264668 52394 CVE-2007-0163 steganography-password-security-bypass(31378)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
56233 JVNDB-2007-004925 SecureKit Steganography における認証要求を回避される脆弱性 SecureKit Steganography は、carrier ファイル内にパスワード情報を組み込むため、認証要求を回避される、および組み込まれたステガノグラフィーを復号される脆弱性が存在します。 CVE-2007-0163 23518 CVE-2007-0163 52394 7.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004925.html 2007-01-09 2012-12-20 View