Vulnerability CVE-2004-2721
Published: 2004-12-31   Modified: 2012-02-12

Description:
The CheckGroup function in openSkat VTMF before 2.1 generates public key pairs in which the "p" variable might not be prime, which allows remote attackers to determine the private key and decrypt messages.

CVSS2 => (AV:N/AC:M/Au:N/C:P/I:N/A:N)

CVSS Base Score
Impact Subscore
Exploitability Subscore
4.3/10
2.9/10
8.6/10
Exploit range
Attack complexity
Authentication
Remote
Medium
No required
Confidentiality impact
Integrity impact
Availability impact
Partial
None
None
Affected software
Heiko stamer -> Openskat 

 References:
http://freshmeat.net/projects/openskat/?branch_id=36295&release_id=178549
http://securitytracker.com/id?1012181
http://www.securityfocus.com/bid/11667
https://exchange.xforce.ibmcloud.com/vulnerabilities/18049
Copyright 2024, cxsecurity.com

 

Back to Top