CVE-2006-0898 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2006-0898
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2006-0898

Description: Crypt::CBC Perl module 2.16 and earlier, when running in RandomIV mode, uses an initialization vector (IV) of 8 bytes, which results in weaker encryption when used with a cipher that requires a larger block size than 8 bytes, such as Rijndael.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/24954 SUSE http://www.novell.com/linux/security/advisories/2006_38_security.html SREASON http://securityreason.com/securityalert/488 SAID Secunia Advisory: SA20899 Secunia Advisory: SA19303 Secunia Advisory: SA19187 Secunia Advisory: SA18755 Secunia Advisory: SA31493 REDHAT http://rhn.redhat.com/errata/RHSA-2008-0630.html http://www.redhat.com/support/errata/RHSA-2008-0261.html GENTOO http://www.gentoo.org/security/en/glsa/glsa-200603-15.xml DEBIAN http://www.debian.org/security/2006/dsa-996 BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/425966/100/0/threaded BID 16802

Return to the previous page.