|
|
CVE Reference: CVE-2006-0898 |
|
| NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. | |
|
Original Page at CVE MITRE: CVE-2006-0898 |
|
|
Description: Crypt::CBC Perl module 2.16 and earlier, when running in RandomIV mode, uses an initialization vector (IV) of 8 bytes, which results in weaker encryption when used with a cipher that requires a larger block size than 8 bytes, such as Rijndael. |
|
|
CVE Status: Candidate |
|
|
References: XF http://xforce.iss.net/xforce/xfdb/24954 SUSE http://www.novell.com/linux/security/advisories/2006_38_security.html SREASON http://securityreason.com/securityalert/488 SAID Secunia Advisory: SA20899 Secunia Advisory: SA19303 Secunia Advisory: SA19187 Secunia Advisory: SA18755 Secunia Advisory: SA31493 REDHAT http://rhn.redhat.com/errata/RHSA-2008-0630.html http://www.redhat.com/support/errata/RHSA-2008-0261.html GENTOO http://www.gentoo.org/security/en/glsa/glsa-200603-15.xml DEBIAN http://www.debian.org/security/2006/dsa-996 BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/425966/100/0/threaded BID 16802 |
|
| Return to the previous page. |
