Multiple Nikon Digital SLR Cameras Image Authentication Security Bypass Vulnerability

Bugtraq ID:	47630
Class:	Unknown
CVE:
Remote:	No
Local:	Yes
Published:	Apr 28 2011 12:00AM
Updated:	Apr 28 2011 12:00AM
Credit:	Elcomsoft
Vulnerable:	Nikon Image Authentication Software 0 Nikon D700 0 Nikon D3X 0 Nikon D300S 0 Nikon D300 0 Nikon D3 0 Nikon D2Xs 0 Nikon D2X 0 Nikon D2Hs 0 Nikon D200 0
Not Vulnerable:

Multiple Nikon Digital SLR Cameras Image Authentication Security Bypass Vulnerability

Multiple Nikon digital SLR cameras are prone to a vulnerability that may allow for the undetected modification of images.

An attacker can exploit this issue to perform unauthorized modifications to photo files.

The following devices are affected; other devices may also be affected:

D3X
D3
D700
D300S
D300
D2Xs
D2X
D2Hs
D200

Multiple Nikon Digital SLR Cameras Image Authentication Security Bypass Vulnerability

The discoverer of this issue has developed a way to exploit this issue.

Multiple Nikon Digital SLR Cameras Image Authentication Security Bypass Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Multiple Nikon Digital SLR Cameras Image Authentication Security Bypass Vulnerability

References:

• Nikon Image Authentication System Vulnerability (Nikon)
  
• Nikon Homepage (Nikon)