RSS   Vulnerabilities for 'Ncore'   RSS

2006-03-09
 
CVE-2006-1117

CWE-Other
 
 
nCipher firmware before V10, as used by (1) nShield, (2) nForce, (3) netHSM, (4) payShield, (5) SecureDB, (6) DSE200 Document Sealing Engine, (7) Time Source Master Clock (TSMC), and possibly other products, contains certain options that were only intended for testing and not production, which might allow remote attackers to obtain information about encryption keys and crack those keys with less effort than brute force.

 
 
CVE-2006-1116

CWE-Other
 
 
The CBC-MAC integrity functions in the nCipher nCore API before 2.18 transmit the initialization vector IV as part of a message when the implementation uses a non-zero IV, which allows remote attackers to bypass integrity checks and modify messages without being detected.

 

 >>> Vendor: Ncipher 15 Products
Ncipher
Mscapi csp
Nforce
Nshield
Pkcs 11 library
Support software
Payshield spp library
CHIL
Ncipher software cd
Ncore
Dse200 document sealing engine
Securedb
Time source master clock
Nethsm
Payshield

Copyright 2024, cxsecurity.com

 

Back to Top