Secunia
Login
|
|
CVE Reference: CVE-2012-2417 |
|
| NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. | |
|
Original Page at CVE MITRE: CVE-2012-2417 |
|
|
Description: PyCrypto before 2.6 does not produce appropriate prime numbers when using an ElGamal scheme to generate a key, which reduces the signature space or public key space and makes it easier for attackers to conduct brute force attacks to obtain the private key. |
|
|
CVE Status: Candidate |
|
|
References: XF http://xforce.iss.net/xforce/xfdb/75871 SUSE SAID Secunia Advisory: SA49263 OSVDB 82279 MLIST http://www.openwall.com/lists/oss-security/2012/05/25/1 MISC MANDRIVA http://www.mandriva.com/security/advisories?name=MDVSA-2012:117 FEDORA http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081759.html http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081789.html http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081713.html DEBIAN http://www.debian.org/security/2012/dsa-2502 CONFIRM BID 53687 |
|
| Return to the previous page. |
