Search

Find a vulnerability

Search criteria

    2 vulnerabilities by securekit

    CVE-2007-0163 (GCVE-0-2007-0163)

    Vulnerability from nvd – Published: 2007-01-10 00:00 – Updated: 2024-08-07 12:12
    VLAI
    Summary
    SecureKit Steganography 1.7.1 and 1.8 embeds password information in the carrier file, which allows remote attackers to bypass authentication requirements and decrypt embedded steganography by replacing the last 20 bytes of the JPEG image with alternate password information.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    mitre CNA under the mitre root
    CNA scorecard E 29/100 over 2146 records in the last 180 days details
    References
    URL Tags
    http://www.securityfocus.com/archive/1/456283/100… mailing-listx_refsource_BUGTRAQ
    http://www.securityfocus.com/archive/1/456519/100… mailing-listx_refsource_BUGTRAQ
    http://osvdb.org/31244 vdb-entryx_refsource_OSVDB
    https://exchange.xforce.ibmcloud.com/vulnerabilit… vdb-entryx_refsource_XF
    http://homepage.mac.com/adonismac/Advisory/steg/s… x_refsource_MISC
    http://secunia.com/advisories/23639 third-party-advisoryx_refsource_SECUNIA
    Date Public
    2007-01-06 00:00
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T12:12:17.582Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "20070106 Cracking Steganography Application in less than ONE minute",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/456283/100/0/threaded"
          },
          {
            "name": "20070107 A Major design Bug in Steganography 1.7.x, 1.8 (latest) (Updated Version)",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/456519/100/0/threaded"
          },
          {
            "name": "31244",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/31244"
          },
          {
            "name": "steganography-password-security-bypass(31378)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31378"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://homepage.mac.com/adonismac/Advisory/steg/steganography.html"
          },
          {
            "name": "23639",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/23639"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-01-06T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "SecureKit Steganography 1.7.1 and 1.8 embeds password information in the carrier file, which allows remote attackers to bypass authentication requirements and decrypt embedded steganography by replacing the last 20 bytes of the JPEG image with alternate password information."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-16T14:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "20070106 Cracking Steganography Application in less than ONE minute",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/456283/100/0/threaded"
        },
        {
          "name": "20070107 A Major design Bug in Steganography 1.7.x, 1.8 (latest) (Updated Version)",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/456519/100/0/threaded"
        },
        {
          "name": "31244",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/31244"
        },
        {
          "name": "steganography-password-security-bypass(31378)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31378"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://homepage.mac.com/adonismac/Advisory/steg/steganography.html"
        },
        {
          "name": "23639",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/23639"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2007-0163",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "SecureKit Steganography 1.7.1 and 1.8 embeds password information in the carrier file, which allows remote attackers to bypass authentication requirements and decrypt embedded steganography by replacing the last 20 bytes of the JPEG image with alternate password information."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "20070106 Cracking Steganography Application in less than ONE minute",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/456283/100/0/threaded"
            },
            {
              "name": "20070107 A Major design Bug in Steganography 1.7.x, 1.8 (latest) (Updated Version)",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/456519/100/0/threaded"
            },
            {
              "name": "31244",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/31244"
            },
            {
              "name": "steganography-password-security-bypass(31378)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31378"
            },
            {
              "name": "http://homepage.mac.com/adonismac/Advisory/steg/steganography.html",
              "refsource": "MISC",
              "url": "http://homepage.mac.com/adonismac/Advisory/steg/steganography.html"
            },
            {
              "name": "23639",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/23639"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2007-0163",
    "datePublished": "2007-01-10T00:00:00.000Z",
    "dateReserved": "2007-01-09T00:00:00.000Z",
    "dateUpdated": "2024-08-07T12:12:17.582Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

    CVE-2007-0163 (GCVE-0-2007-0163)

    Vulnerability from cvelistv5 – Published: 2007-01-10 00:00 – Updated: 2024-08-07 12:12
    VLAI
    Summary
    SecureKit Steganography 1.7.1 and 1.8 embeds password information in the carrier file, which allows remote attackers to bypass authentication requirements and decrypt embedded steganography by replacing the last 20 bytes of the JPEG image with alternate password information.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    mitre CNA under the mitre root
    CNA scorecard E 29/100 over 2146 records in the last 180 days details
    References
    URL Tags
    http://www.securityfocus.com/archive/1/456283/100… mailing-listx_refsource_BUGTRAQ
    http://www.securityfocus.com/archive/1/456519/100… mailing-listx_refsource_BUGTRAQ
    http://osvdb.org/31244 vdb-entryx_refsource_OSVDB
    https://exchange.xforce.ibmcloud.com/vulnerabilit… vdb-entryx_refsource_XF
    http://homepage.mac.com/adonismac/Advisory/steg/s… x_refsource_MISC
    http://secunia.com/advisories/23639 third-party-advisoryx_refsource_SECUNIA
    Date Public
    2007-01-06 00:00
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T12:12:17.582Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "20070106 Cracking Steganography Application in less than ONE minute",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/456283/100/0/threaded"
          },
          {
            "name": "20070107 A Major design Bug in Steganography 1.7.x, 1.8 (latest) (Updated Version)",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/456519/100/0/threaded"
          },
          {
            "name": "31244",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/31244"
          },
          {
            "name": "steganography-password-security-bypass(31378)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31378"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://homepage.mac.com/adonismac/Advisory/steg/steganography.html"
          },
          {
            "name": "23639",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/23639"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-01-06T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "SecureKit Steganography 1.7.1 and 1.8 embeds password information in the carrier file, which allows remote attackers to bypass authentication requirements and decrypt embedded steganography by replacing the last 20 bytes of the JPEG image with alternate password information."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-16T14:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "20070106 Cracking Steganography Application in less than ONE minute",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/456283/100/0/threaded"
        },
        {
          "name": "20070107 A Major design Bug in Steganography 1.7.x, 1.8 (latest) (Updated Version)",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/456519/100/0/threaded"
        },
        {
          "name": "31244",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/31244"
        },
        {
          "name": "steganography-password-security-bypass(31378)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31378"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://homepage.mac.com/adonismac/Advisory/steg/steganography.html"
        },
        {
          "name": "23639",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/23639"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2007-0163",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "SecureKit Steganography 1.7.1 and 1.8 embeds password information in the carrier file, which allows remote attackers to bypass authentication requirements and decrypt embedded steganography by replacing the last 20 bytes of the JPEG image with alternate password information."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "20070106 Cracking Steganography Application in less than ONE minute",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/456283/100/0/threaded"
            },
            {
              "name": "20070107 A Major design Bug in Steganography 1.7.x, 1.8 (latest) (Updated Version)",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/456519/100/0/threaded"
            },
            {
              "name": "31244",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/31244"
            },
            {
              "name": "steganography-password-security-bypass(31378)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31378"
            },
            {
              "name": "http://homepage.mac.com/adonismac/Advisory/steg/steganography.html",
              "refsource": "MISC",
              "url": "http://homepage.mac.com/adonismac/Advisory/steg/steganography.html"
            },
            {
              "name": "23639",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/23639"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2007-0163",
    "datePublished": "2007-01-10T00:00:00.000Z",
    "dateReserved": "2007-01-09T00:00:00.000Z",
    "dateUpdated": "2024-08-07T12:12:17.582Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}