CVE-2004-2135

Linux kernel <2.6 - Info Disclosure

Title source: llm
STIX 2.1

Description

cryptoloop on Linux kernel 2.6.x, when used on certain file systems with a block size 1024 or greater, has certain "IV computation" weaknesses that allow watermarked files to be detected without decryption.

Exploits (1)

exploitdb WRITEUP VERIFIED
by Markku-Juhani O. Saarinen · textlocallinux
https://www.exploit-db.com/exploits/25707

References (4)

Core 4
Core References
Various Sources x_refsource_misc
http://mareichelt.de/pub/notmine/diskenc.pdf
Exploit, Vendor Advisory vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/13775
Exploit, Vendor Advisory x_refsource_misc
http://www.securiteam.com/exploits/5UP0P1PFPM.html
Mailing List mailing-list x_refsource_mlist
http://marc.info/?l=linux-kernel&m=107719798631935&w=2

Scores

EPSS 0.0099
EPSS Percentile 77.1%

Details

Status published
Products (22)
linux/linux_kernel 2.4.0 (13 CPE variants)
linux/linux_kernel 2.4.1
linux/linux_kernel 2.4.2
linux/linux_kernel 2.4.3
linux/linux_kernel 2.4.4
linux/linux_kernel 2.4.5
linux/linux_kernel 2.4.6
linux/linux_kernel 2.4.7
linux/linux_kernel 2.4.8
linux/linux_kernel 2.4.9
... and 12 more
Published May 26, 2004
Tracked Since Feb 18, 2026