Lucene search

K
nvd[email protected]NVD:CVE-2005-1600
HistoryMay 16, 2005 - 4:00 a.m.

CVE-2005-1600

2005-05-1604:00:00
web.nvd.nist.gov
3

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.5

Confidence

High

EPSS

0.004

Percentile

74.6%

A “mathematical flaw” in the implementation of the El Gamal signature algorithm for LibTomCrypt 1.0 to 1.0.2 allows attackers to generate valid signatures without having the private key.

Affected configurations

Nvd
Node
libtomcryptlibtomcryptMatch1.0
OR
libtomcryptlibtomcryptMatch1.0.1
OR
libtomcryptlibtomcryptMatch1.0.2
VendorProductVersionCPE
libtomcryptlibtomcrypt1.0cpe:2.3:a:libtomcrypt:libtomcrypt:1.0:*:*:*:*:*:*:*
libtomcryptlibtomcrypt1.0.1cpe:2.3:a:libtomcrypt:libtomcrypt:1.0.1:*:*:*:*:*:*:*
libtomcryptlibtomcrypt1.0.2cpe:2.3:a:libtomcrypt:libtomcrypt:1.0.2:*:*:*:*:*:*:*

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.5

Confidence

High

EPSS

0.004

Percentile

74.6%

Related for NVD:CVE-2005-1600