PT-2008-2206 · Lsrunase+1 · Lsrunase+1

Publicado 2008-02-05 · Atualizado 2018-10-15 · CVE-2008-0580

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions LSrunasE and Supercrypt (affected versions not specified)

Description The issue concerns the encryption key used by LSrunasE and Supercrypt, which is composed of an SHA1 hash of a fixed string embedded in the executable file. This makes it easier for local users to obtain the key without needing to reverse engineer the software.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2008-0580

Produtos afetados

Lsrunase

Supercrypt

Referências · 4

• http://securityreason.com/securityalert/3611 · Nota
• http://securityfocus.com/bid/27500 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-0580 · Nota de Segurança
• http://securityfocus.com/archive/1/487269/100/0/threaded · Nota