|
|
CVE Reference: CVE-2006-1116 |
|
| NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. | |
|
Original Page at CVE MITRE: CVE-2006-1116 |
|
|
Description: The CBC-MAC integrity functions in the nCipher nCore API before 2.18 transmit the initialization vector IV as part of a message when the implementation uses a non-zero IV, which allows remote attackers to bypass integrity checks and modify messages without being detected. |
|
|
CVE Status: Candidate |
|
|
References: XF http://xforce.iss.net/xforce/xfdb/25062 ST 1015718 SAID Secunia Advisory: SA19137 CONFIRM http://www.ncipher.com/resources/96/sa13_cbcmac_iv_misleading_programming_interface BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/427150/100/0/threaded BID 17011 |
|
| Return to the previous page. |
