PT-2001-2022 · Ibm · Ibm 4758

Published 2001-11-22 · Updated 2016-10-18 · CVE-2001-0856

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions IBM 4758 (affected versions not specified)

Description The issue concerns the Common Cryptographic Architecture (CCA) in IBM 4758, which allows an attacker with physical access to the system and Combine Key Parts permissions to steal DES and 3DES keys. This is achieved by using a brute force attack to create a 3DES exporter key.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2001-0856

Affected Products

Ibm 4758

References · 5

• 🔥 http://cl.cam.ac.uk/~rnc1/descrack/attack.html · Exploit
• http://cl.cam.ac.uk/~rnc1/descrack · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2001-0856 · Security Note
• http://securityfocus.com/bid/3524 · Note
• http://marc.info/?l=bugtraq&m=100533053219673&w=2 · Note