CVE-2006-0898

Advisory lineage Upstream: 0 Downstream: 5
Modified
Published: 25 Feb 2006, 11:00
Last modified:07 Aug 2024, 16:48

Vulnerability Summary

Overall Risk (default)
low
11/100
CVSS Score
2.6 LOW
v2.0 (nvd)
EPSS Score
1.44% LOW
1% probability 0.00%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

25 Feb 2006, 11:00
Published
Vulnerability first disclosed
07 Aug 2024, 16:48
Last Modified
Vulnerability information updated

Description

Crypt::CBC Perl module 2.16 and earlier, when running in RandomIV mode, uses an initialization vector (IV) of 8 bytes, which results in weaker encryption when used with a cipher that requires a larger block size than 8 bytes, such as Rijndael.

CVSS Metrics

  • v2.0•LOW•Score: 2.6AV:N/AC:H/Au:N/C:P/I:N/A:N

EPSS Trends

Current EPSS score: 1.44%• Percentile: 81%

Affected Systems

  • lincoln_d._stein•crypt_cbc

    ≤ 2.16 | 1.00 | 1.10 | 1.20 | 1.21 | 1.22 | 1.24 | 1.25 | 2.00 | 2.01 | 2.02 | 2.03 | 2.04 | 2.05 | 2.07 | 2.08 | 2.09 | 2.10 | 2.11 | 2.12 | 2.13 | 2.14 | 2.15

References (14)