Lucene search
MitreCVELIST:CVE-2007-3528HistoryJul 03, 2007 - 6:00 p.m.
CVE-2007-3528
2007-07-0318:00:00
mitre
www.cve.org
The blowfish mode in DAR before 2.3.4 uses weak Blowfish-CBC cryptography by (1) discarding random bits by the blowfish::make_ivec function in libdar/crypto.cpp that results in predictable and repeating IV values, and (2) direct use of a password for keying, which makes it easier for context-dependent attackers to decrypt files.
References
bugs.debian.org/cgi-bin/bugreport.cgi?bug=425335
osvdb.org/38189
osvdb.org/38190
secunia.com/advisories/25953
www.securityfocus.com/bid/24930
sourceforge.net/forum/forum.php?forum_id=711619
sourceforge.net/forum/forum.php?forum_id=711620
sourceforge.net/tracker/index.php?func=detail&aid=1730439&group_id=65612&atid=511612
Related
openvas
openvas
Fedora Update for dar FEDORA-2007-0904
2009-02-27 00:00:00
Fedora Update for dar FEDORA-2007-0904
2009-02-27 00:00:00
debiancve
debiancve
CVE-2007-3528
2007-07-03 18:30:00
nessus
nessus
Fedora 7 : dar-2.3.4-1.fc7 (2007-0904)
2007-11-06 00:00:00
prion
prion
Design/Logic Flaw
2007-07-03 18:30:00
nvd
nvd
CVE-2007-3528
2007-07-03 18:30:00
cve
cve
CVE-2007-3528
2007-07-03 18:30:00
fedora
fedora
[SECURITY] Fedora 7 Update: dar-2.3.4-1.fc7
2007-07-05 19:24:42
ubuntucve
ubuntucve
CVE-2007-3528
2007-07-03 00:00:00