Lucene search
HistoryOct 06, 2007 - 9:00 p.m.
CVE-2004-2721
openskat
vtmf
checkgroup
public key
prime variable
remote attackers
private key
decrypt messages
cve-2004-2721
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
7 High
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
73.1%
The CheckGroup function in openSkat VTMF before 2.1 generates public key pairs in which the “p” variable might not be prime, which allows remote attackers to determine the private key and decrypt messages.
Affected configurations
Node
heiko_stameropenskatRange≤2.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| heiko_stamer:openskat | heiko stamer openskat | le | 2.0 |
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
7 High
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
73.1%
Related for CVE-2004-2721