PT-2008-1550 · Lsrunase+1 · Lsrunase+1

Publicado 2008-02-05 · Atualizado 2018-10-15 · CVE-2007-6340

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions LSrunasE version 1.0 Supercrypt version 1.0

Description The issue makes it easier for local users to obtain cleartext passwords because the RC4 stream cipher is used without constructing a unique initialization vector (IV).

Recommendations For LSrunasE version 1.0, consider disabling the use of the RC4 stream cipher until a patch is available. For Supercrypt version 1.0, consider disabling the use of the RC4 stream cipher until a patch is available.

Correção

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2007-6340

Produtos afetados

Lsrunase

Supercrypt

Referências · 5

• http://securityfocus.com/archive/1/487269/100/0/threaded · Nota
• http://moernaut.com/default.aspx?item=lsrunase · Correção
• http://securityreason.com/securityalert/3611 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-6340 · Nota de Segurança
• http://moernaut.com/default.aspx?item=supercrypt · Correção