Re: The Misuse of RC4 in Microsoft Word and Excel

To: Hongjun Wu <hongjun@xxxxxxxxxxxxxxxxx>
Subject: Re: The Misuse of RC4 in Microsoft Word and Excel
From: Brendan Dolan-Gavitt <bdolangavitt@xxxxxxxxxxxx>
Date: Tue, 11 Jan 2005 14:42:02 -0500
Cc: bugtraq@xxxxxxxxxxxxxxxxx
In-reply-to: <20050111113754.21736.qmail@xxxxxxxxxxxxxxxxxxxxx>
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm
References: <20050111113754.21736.qmail@xxxxxxxxxxxxxxxxxxxxx>
User-agent: Mutt/1.5.6+20040907i

This isn't the first time Microsoft has made this exact mistake with
RC4; they did it with Syskey too. Have a look at:

http://www.bindview.com/Support/RAZOR/Advisories/1999/adv_WinNT_syskey.cfm

-Brendan

Attachment: signature.asc
Description: Digital signature

References:
- The Misuse of RC4 in Microsoft Word and Excel
  - From: Hongjun Wu

Prev by Date: [ GLSA 200501-22 ] poppassd_pam: Unauthorized password changing
Next by Date: [ GLSA 200501-13 ] pdftohtml: Vulnerabilities in included Xpdf
Previous by thread: The Misuse of RC4 in Microsoft Word and Excel
Next by thread: HylaFAX hfaxd unauthorized login vulnerability
Index(es):
- Date
- Thread