Lucene search
HistoryMar 24, 2006 - 2:02 a.m.
CVE-2006-1378
CVSS2
4.9
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:C/I:N/A:N
AI Score
6.5
Confidence
Low
EPSS
0.001
Percentile
30.7%
PasswordSafe 3.0 beta, when running on Windows before XP, uses a weak random number generator (C++ rand function) during generation of the database encryption key, which makes it easier for attackers to decrypt the database and steal passwords by generating keys for all possible rand() seed values and conducting a known plaintext attack.
Affected configurations
Node
counterpanepassword_safeMatch3.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| counterpane | password_safe | 3.0 | cpe:2.3:a:counterpane:password_safe:3.0:*:*:*:*:*:*:* |
Related
prion
prion
Design/Logic Flaw
2006-03-24 02:02:00
cvelist
cvelist
CVE-2006-1378
2006-03-24 02:00:00
cve
cve
CVE-2006-1378
2006-03-24 02:02:00
CVSS2
4.9
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:C/I:N/A:N
AI Score
6.5
Confidence
Low
EPSS
0.001
Percentile
30.7%
Related for NVD:CVE-2006-1378