linux-kernel - CVE-2004-2135 and CVE-2004-2136

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [day] [month] [year] [list]

Message-Id: <20091202094539.c1184899.michael.s.gilbert@gmail.com>
Date:	Wed, 2 Dec 2009 09:45:39 -0500
From:	Michael Gilbert <michael.s.gilbert@...il.com>
To:	linux-kernel@...r.kernel.org
Subject: CVE-2004-2135 and CVE-2004-2136

Hi,

CVE-2004-2135 [0] and CVE-2004-2136 [1] were disclosed over five years
ago; however, i have been unable to verify whether they have been fixed
or not in the latest kernels.  The paper [2] indicates that the
disclosing team developed a 3,000 line patch, but I have been unable to
track this down to determine whether or not it has been applied.  There
is also this more current write-up [3], which is rather revealing.  Have
these issues slipped through the cracks?  Thanks upfront for any info on
the matter.

Best wishes,
Mike

[0] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-2135
[1] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-2136
[2] http://mareichelt.de/pub/notmine/diskenc.pdf
[3] http://mareichelt.de/pub/texts.cryptoloop.php?alt_styles=2
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/