PT-2004-3611 · Openskat · Openskat Vtmf

Published 2004-12-31 · Updated 2017-07-29 · CVE-2004-2721

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions openSkat VTMF versions prior to 2.1

Description The issue concerns the generation of public key pairs, where the p variable might not be prime. This allows remote attackers to determine the private key and decrypt messages.

Recommendations For versions prior to 2.1, update to version 2.1 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-310

Related Identifiers

CVE-2004-2721

Affected Products

Openskat Vtmf

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2004-2721 · Security Note
• http://freshmeat.net/projects/openskat/?branch_id=36295&release_id=178549 · Patch
• http://securityfocus.com/bid/11667 · Patch
• http://osvdb.org/11652 · Note
• http://securitytracker.com/id?1012181 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18049 · Note