6.0.0-beta1
▾
Tasks
New Task
Search
Photos
Wiki
▾
Tickets
New Ticket
Search
dev.horde.org
Toggle Alerts Log
Help
7/26/25
H
istory
A
ttachments
C
omment
W
atch
Download
Comment on [#9121] decrypted password issue (DIGEST-MD5)
*
Your Email Address
*
Spam protection
Enter the letters below:
. .. .__ .__..___ |\ || [__)| |[__ | \||___| |__|[___
Comment
> Dear Horde Team, > > According to: http://www.php.net/manual/en/function.mcrypt-generic.php > > A stored password may be padded with \0, if it's length is not the > same as the block size (8 chars). > > This feature is used by Crypt::Blowfish, which is used again by > Horde::Secret to store password used to do DIGEST-MD5 Authentication. > > I've attached a patch which check the length of the encrypted message. > >
Attachment
Watch this ticket
N
ew Ticket
M
y Tickets
S
earch
Q
uery Builder
R
eports
Saved Queries
Open Bugs
Bugs waiting for Feedback
Open Bugs in Releases
Open Enhancements
Enhancements waiting for Feedback
Bugs with Patches
Enhancements with Patches
Release Showstoppers
Stalled Tickets
New Tickets
Horde 5 Showstoppers