PT-2019-6887 · Cryptocat · Cryptocat

Security Curmudgeon · Published 2019-11-04 · Updated 2019-11-05 · CVE-2013-2257

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cryptocat versions prior to 2.0.42

Description The issue concerns a weakness in the generation of ECC private keys for group chats, which could potentially be exploited through brute force.

Recommendations For versions prior to 2.0.42, update to version 2.0.42 or later to resolve the issue.

Fix

Improper Restriction of Excessive Authentication Attempts

Weakness Enumeration

CWE-307

Related Identifiers

CVE-2013-2257

Affected Products

Cryptocat

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2013-2257 · Security Note
• https://tobtu.com/decryptocat.php · Note
• https://securityfocus.com/bid/61087 · Note
• https://openwall.com/lists/oss-security/2013/07/10/15 · Note