CVE-2007-0164

Camouflage 1.2.1 embeds password information in the carrier file, which allows remote attackers to bypass authentication requirements and decrypt embedded steganography by replacing certain bytes of the JPEG image with alternate password information.

CVSS v2.0 7.8 HIGH

7.8^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:C/I:N/A:N

Exploitability : 10.0 / Impact : 6.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://homepage.mac.com/adonismac/Advisory/steg/camouflage.html	Exploit Vendor Advisory
http://osvdb.org/32651
http://secunia.com/advisories/23578	Vendor Advisory
http://www.securityfocus.com/archive/1/456541/100/0/threaded
http://www.securityfocus.com/bid/21939
https://exchange.xforce.ibmcloud.com/vulnerabilities/31375

Configurations

Configuration 1 (hide)

cpe:2.3:a:camouflage:camouflage:1.2.1:*:*:*:*:*:*:*

History

No history.

Information

Published : 2007-01-10 00:28

Updated : 2024-02-28 11:01

NVD link : CVE-2007-0164

Mitre link : CVE-2007-0164

CVE.ORG link : CVE-2007-0164

JSON object : View

Products Affected

camouflage

camouflage

CWE

NVD-CWE-Other

{"id": "CVE-2007-0164", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 6.9, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2007-01-10T00:28:00.000", "references": [{"url": "http://homepage.mac.com/adonismac/Advisory/steg/camouflage.html", "tags": ["Exploit", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://osvdb.org/32651", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/23578", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/456541/100/0/threaded", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/21939", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31375", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Camouflage 1.2.1 embeds password information in the carrier file, which allows remote attackers to bypass authentication requirements and decrypt embedded steganography by replacing certain bytes of the JPEG image with alternate password information."}, {"lang": "es", "value": "Camouflage 1.2.1 incrusta informaci\u00f3n de contrase\u00f1as en el fichero de carrera, lo cual permite a un atacante remoto envitar los requisitos de validaci\u00f3n y desencripta la estenograf\u00eda embebida a trav\u00e9s del reemplazo de ciertos bytes de una imagen JPEG con una informaci\u00f3n de contrase\u00f1a alternativa."}], "lastModified": "2018-10-16T16:31:29.993", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:camouflage:camouflage:1.2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "23FFE3C1-0E9F-4862-8E1B-8D04741B85AD"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}