PT-2008-2206 · Lsrunase+1 · Lsrunase+1

Published 2008-02-05 · Updated 2018-10-15 · CVE-2008-0580

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions LSrunasE and Supercrypt (affected versions not specified)

Description The issue concerns the encryption key used by LSrunasE and Supercrypt, which is composed of an SHA1 hash of a fixed string embedded in the executable file. This makes it easier for local users to obtain the key without needing to reverse engineer the software.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2008-0580

Affected Products

Lsrunase

Supercrypt

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2008-0580 · Security Note
• http://securityreason.com/securityalert/3611 · Note
• http://securityfocus.com/bid/27500 · Note
• http://securityfocus.com/archive/1/487269/100/0/threaded · Note