EUVD-2006-1542

Malware in sbrugna...

Code injection

The Enova X-Wall ASIC encrypts with a key obtained via Microwire from a serial EEPROM that stores the key in cleartext, which allows local users with physical access to obtain the key by reading and duplicating an EEPROM that is located on a hardware token, or by sniffing the Microwire bus...

CVE-2006-1538

The Enova X-Wall ASIC encrypts with a key obtained via Microwire from a serial EEPROM that stores the key in cleartext, which allows local users with physical access to obtain the key by reading and duplicating an EEPROM that is located on a hardware token, or by sniffing the Microwire bus...

CVE-2006-1538

The Enova X-Wall ASIC encrypts with a key obtained via Microwire from a serial EEPROM that stores the key in cleartext, which allows local users with physical access to obtain the key by reading and duplicating an EEPROM that is located on a hardware token, or by sniffing the Microwire bus...

CVE-2006-1538

The CVE-2006-1538 case concerns the Enova X-Wall ASIC, where a key is obtained via Microwire from a serial EEPROM that stores the key in cleartext. This enables local users with physical access to extract the key by reading/duplicating the EEPROM on a hardware token, or by sniffing the Microwire ...

CVE-2006-1538: Undefined Security Weakness

The Enova X-Wall ASIC encrypts with a key obtained via Microwire from a serial EEPROM that stores the key in cleartext, which allows local users with physical access to obtain the key by reading and duplicating an EEPROM that is located on a hardware token, or by sniffing the Microwire bus...

[Full-disclosure] [HV-INFO] Enova hardware encryption: false sense of security

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Enova hardware encryption: False sense of security Classification: =============== Level: Informational ID: HEXVIEW200603281 URL: http://www.hexview.com/docs/20060328-1.txt Overview: ========= Enova Technology is a manufacturer of the X-Wall ASIC that...