JpegX 2.0.0.3 Password Bypass Vulnerability

From: JeiAr (jeiarat_private)
Date: Sat Apr 05 2003 - 13:16:30 PST

  • Next message: Berend-Jan Wever: "[VulnWatch] Coppermine Photo Gallery remote compromise"

    
     ('binary' encoding is not supported, stored as-is)
    JpegX 2.0.0.3 Password Bypass Vulnerability
    --------------------------------------------------
    Written by Lawrence Kom
    09/30/01
    http://www.nerdlogic.org/jpegx
    larryat_private
    aim: kloned
    
    
    Modified the encryption format to avoid guillermito's program.
    http://www.pipo.com/guillermito/jpegx/index.html
    
    Still has all previous features 
    Can read version 1 & version 2 files.
    Can clean files & overwrite jpegx messages in files.
    Will automaticly overwrite with the new encryption format.
    
    Now includes a wizard to make it easier to read/write jpeg files.
    Got input? check out the new homepage.
    
    http://nerdlogic.org/jpegx
    
    
    Problem
    --------------------------------------------------
    Nothin complex here. Just open a crypted .jpg with
    the wizard, enter ANY password and message is then
    successfully decrypted. Only works when using the 
    wizard.
    
    
    Credits Go To JeiAr of GulfTech Computers And CASR
    



    This archive was generated by hypermail 2b30 : Mon Apr 07 2003 - 09:48:45 PDT