PT-2008-1550 · Lsrunase+1 · Lsrunase+1

Published 2008-02-05 · Updated 2018-10-15 · CVE-2007-6340

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions LSrunasE version 1.0 Supercrypt version 1.0

Description The issue makes it easier for local users to obtain cleartext passwords because the RC4 stream cipher is used without constructing a unique initialization vector (IV).

Recommendations For LSrunasE version 1.0, consider disabling the use of the RC4 stream cipher until a patch is available. For Supercrypt version 1.0, consider disabling the use of the RC4 stream cipher until a patch is available.

Fix

Weakness Enumeration

CWE-255

Related Identifiers

CVE-2007-6340

Affected Products

Lsrunase

Supercrypt

References · 5

• http://moernaut.com/default.aspx?item=lsrunase · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2007-6340 · Security Note
• http://moernaut.com/default.aspx?item=supercrypt · Patch
• http://securityfocus.com/archive/1/487269/100/0/threaded · Note
• http://securityreason.com/securityalert/3611 · Note