Lucene search

[email protected]CVE-2006-1117

HistoryMar 09, 2006 - 1:06 p.m.

CVE-2006-1117

2006-03-0913:06:00

[email protected]

web.nvd.nist.gov

ncipher

firmware

v10

remote attackers

encryption keys

brute force

security vulnerability

2.6 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:N/A:N

6.7 Medium

AI Score

Confidence

Low

0.014 Low

EPSS

Percentile

86.3%

JSON

nCipher firmware before V10, as used by (1) nShield, (2) nForce, (3) netHSM, (4) payShield, (5) SecureDB, (6) DSE200 Document Sealing Engine, (7) Time Source Master Clock (TSMC), and possibly other products, contains certain options that were only intended for testing and not production, which might allow remote attackers to obtain information about encryption keys and crack those keys with less effort than brute force.

Affected configurations

NVD

Node

ncipherdse200_document_sealing_engine

ncipherncore

nciphernforce

nciphersecuredb

nciphertime_source_master_clock

Node

nciphernethsmMatch2.0

nciphernethsmMatch2.1

nciphernethsmMatch2.1.12_cam5

nciphernshield

ncipherpayshield

CPENameOperatorVersion
ncipher:dse200_document_sealing_enginencipher dse200 document sealing engineeq*
ncipher:ncorencipher ncoreeq*
ncipher:nforcencipher nforceeq*
ncipher:securedbncipher securedbeq*
ncipher:time_source_master_clockncipher time source master clockeq*

CPE	Name	Operator	Version
ncipher:dse200_document_sealing_engine	ncipher dse200 document sealing engine	eq	*
ncipher:ncore	ncipher ncore	eq	*
ncipher:nforce	ncipher nforce	eq	*
ncipher:securedb	ncipher securedb	eq	*
ncipher:time_source_master_clock	ncipher time source master clock	eq	*

References

secunia.com/advisories/19137

securitytracker.com/id?1015718

www.ncipher.com/resources/97/sa14_presence_of_flaws_in_firmware_security

www.securityfocus.com/archive/1/427151/100/0/threaded

www.securityfocus.com/bid/17012

www.vupen.com/english/advisories/2006/0862

exchange.xforce.ibmcloud.com/vulnerabilities/25063

2.6 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:N/A:N

6.7 Medium

AI Score

Confidence

Low

0.014 Low

EPSS

Percentile

86.3%

JSON

Related for CVE-2006-1117

nvd1 cvelist1 prion1