Lucene search

[email protected]CVE-2005-1797

HistoryMay 26, 2005 - 4:00 a.m.

CVE-2005-1797

2005-05-2604:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

aes

rijndael

advanced encryption standard

vulnerability

timing attacks

key recovery

nvd

6.9 Medium

AI Score

Confidence

Low

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.004 Low

EPSS

Percentile

71.9%

JSON

The design of Advanced Encryption Standard (AES), aka Rijndael, allows remote attackers to recover AES keys via timing attacks on S-box lookups, which are difficult to perform in constant time in AES implementations.

CPENameOperatorVersion
openssl:opensslopenssleq0.9.7
openssl:opensslopenssleq0.9.6i
openssl:opensslopenssleq0.9.3
openssl:opensslopenssleq0.9.7c
openssl:opensslopenssleq0.9.6d
openssl:opensslopenssleq0.9.1c
openssl:opensslopenssleq0.9.6
openssl:opensslopenssleq0.9.6a
openssl:opensslopenssleq0.9.4
openssl:opensslopenssleq0.9.5a

CPE	Name	Operator	Version
openssl:openssl	openssl	eq	0.9.7
openssl:openssl	openssl	eq	0.9.6i
openssl:openssl	openssl	eq	0.9.3
openssl:openssl	openssl	eq	0.9.7c
openssl:openssl	openssl	eq	0.9.6d
openssl:openssl	openssl	eq	0.9.1c
openssl:openssl	openssl	eq	0.9.6
openssl:openssl	openssl	eq	0.9.6a
openssl:openssl	openssl	eq	0.9.4
openssl:openssl	openssl	eq	0.9.5a

Rows per page:

1-10 of 251

References

cr.yp.to/antiforgery/cachetiming-20050414.pdf

www.securityfocus.com/bid/13785

6.9 Medium

AI Score

Confidence

Low

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.004 Low

EPSS

Percentile

71.9%

JSON

Related for CVE-2005-1797

cvelist1 redhatcve1 nessus1