CVE-2007-6721
Summary
| CVE | CVE-2007-6721 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2009-03-30 01:30:00 UTC |
| Updated | 2026-04-23 00:35:47 UTC |
| Description | The Legion of the Bouncy Castle Java Cryptography API before release 1.38, as used in Crypto Provider Package before 1.36, has unknown impact and remote attack vectors related to "a Bleichenbacher vulnerability in simple RSA CMS signatures without signed attributes." |
Risk And Classification
Primary CVSS: v2.0 10 from [email protected]
AV:N/AC:L/Au:N/C:C/I:C/A:C
Problem Types: NVD-CWE-noinfo | n/a
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
LowAuthentication
NoneConfidentiality
CompleteIntegrity
CompleteAvailability
CompleteAV:N/AC:L/Au:N/C:C/I:C/A:C
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Bouncycastle | Bc-java | 1.01 | All | All | All |
| Application | Bouncycastle | Bc-java | 1.02 | All | All | All |
| Application | Bouncycastle | Bc-java | 1.03 | All | All | All |
| Application | Bouncycastle | Bc-java | 1.04 | All | All | All |
| Application | Bouncycastle | Bc-java | 1.05 | All | All | All |
| Application | Bouncycastle | Bc-java | 1.06 | All | All | All |
| Application | Bouncycastle | Bc-java | 1.07 | All | All | All |
| Application | Bouncycastle | Bc-java | 1.08 | All | All | All |
| Application | Bouncycastle | Bc-java | 1.09 | All | All | All |
| Application | Bouncycastle | Bc-java | 1.10 | All | All | All |
| Application | Bouncycastle | Bc-java | 1.11 | All | All | All |
| Application | Bouncycastle | Bc-java | 1.12 | All | All | All |
| Application | Bouncycastle | Bc-java | 1.13 | All | All | All |
| Application | Bouncycastle | Bc-java | 1.14 | All | All | All |
| Application | Bouncycastle | Bc-java | 1.15 | All | All | All |
| Application | Bouncycastle | Bc-java | 1.16 | All | All | All |
| Application | Bouncycastle | Bc-java | 1.17 | All | All | All |
| Application | Bouncycastle | Bc-java | 1.18 | All | All | All |
| Application | Bouncycastle | Bc-java | 1.19 | All | All | All |
| Application | Bouncycastle | Bc-java | 1.20 | All | All | All |
| Application | Bouncycastle | Bc-java | 1.21 | All | All | All |
| Application | Bouncycastle | Bc-java | 1.22 | All | All | All |
| Application | Bouncycastle | Bc-java | 1.23 | All | All | All |
| Application | Bouncycastle | Bc-java | 1.24 | All | All | All |
| Application | Bouncycastle | Bc-java | 1.25 | All | All | All |
| Application | Bouncycastle | Bc-java | 1.26 | All | All | All |
| Application | Bouncycastle | Bc-java | 1.27 | All | All | All |
| Application | Bouncycastle | Bc-java | 1.28 | All | All | All |
| Application | Bouncycastle | Bc-java | 1.29 | All | All | All |
| Application | Bouncycastle | Bc-java | 1.30 | All | All | All |
| Application | Bouncycastle | Bc-java | 1.31 | All | All | All |
| Application | Bouncycastle | Bc-java | 1.32 | All | All | All |
| Application | Bouncycastle | Bc-java | 1.33 | All | All | All |
| Application | Bouncycastle | Bc-java | 1.34 | All | All | All |
| Application | Bouncycastle | Bc-java | 1.35 | All | All | All |
| Application | Bouncycastle | Bc-java | 1.36 | All | All | All |
| Application | Bouncycastle | Bc-java | All | All | All | All |
| Application | Bouncycastle | Bouncy-castle-crypto-package | 1.0 | All | All | All |
| Application | Bouncycastle | Bouncy-castle-crypto-package | 1.01 | All | All | All |
| Application | Bouncycastle | Bouncy-castle-crypto-package | 1.02 | All | All | All |
| Application | Bouncycastle | Bouncy-castle-crypto-package | 1.03 | All | All | All |
| Application | Bouncycastle | Bouncy-castle-crypto-package | 1.04 | All | All | All |
| Application | Bouncycastle | Bouncy-castle-crypto-package | 1.05 | All | All | All |
| Application | Bouncycastle | Bouncy-castle-crypto-package | 1.06 | All | All | All |
| Application | Bouncycastle | Bouncy-castle-crypto-package | 1.07 | All | All | All |
| Application | Bouncycastle | Bouncy-castle-crypto-package | 1.08 | All | All | All |
| Application | Bouncycastle | Bouncy-castle-crypto-package | 1.09 | All | All | All |
| Application | Bouncycastle | Bouncy-castle-crypto-package | 1.11 | All | All | All |
| Application | Bouncycastle | Bouncy-castle-crypto-package | 1.12 | All | All | All |
| Application | Bouncycastle | Bouncy-castle-crypto-package | 1.13 | All | All | All |
| Application | Bouncycastle | Bouncy-castle-crypto-package | 1.14 | All | All | All |
| Application | Bouncycastle | Bouncy-castle-crypto-package | 1.15 | All | All | All |
| Application | Bouncycastle | Bouncy-castle-crypto-package | 1.16 | All | All | All |
| Application | Bouncycastle | Bouncy-castle-crypto-package | 1.17 | All | All | All |
| Application | Bouncycastle | Bouncy-castle-crypto-package | 1.18 | All | All | All |
| Application | Bouncycastle | Bouncy-castle-crypto-package | 1.19 | All | All | All |
| Application | Bouncycastle | Bouncy-castle-crypto-package | 1.20 | All | All | All |
| Application | Bouncycastle | Bouncy-castle-crypto-package | 1.21 | All | All | All |
| Application | Bouncycastle | Bouncy-castle-crypto-package | 1.22 | All | All | All |
| Application | Bouncycastle | Bouncy-castle-crypto-package | 1.23 | All | All | All |
| Application | Bouncycastle | Bouncy-castle-crypto-package | 1.24 | All | All | All |
| Application | Bouncycastle | Bouncy-castle-crypto-package | 1.25 | All | All | All |
| Application | Bouncycastle | Bouncy-castle-crypto-package | 1.26 | All | All | All |
| Application | Bouncycastle | Bouncy-castle-crypto-package | 1.27 | All | All | All |
| Application | Bouncycastle | Bouncy-castle-crypto-package | 1.28 | All | All | All |
| Application | Bouncycastle | Bouncy-castle-crypto-package | 1.29 | All | All | All |
| Application | Bouncycastle | Bouncy-castle-crypto-package | 1.3.1 | All | All | All |
| Application | Bouncycastle | Bouncy-castle-crypto-package | 1.30 | All | All | All |
| Application | Bouncycastle | Bouncy-castle-crypto-package | 1.32 | All | All | All |
| Application | Bouncycastle | Bouncy-castle-crypto-package | 1.33 | All | All | All |
| Application | Bouncycastle | Bouncy-castle-crypto-package | 1.34 | All | All | All |
| Application | Bouncycastle | Bouncy-castle-crypto-package | All | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| The Legion of the Bouncy Castle C# Cryptography APIs | af854a3a-2127-422b-91ae-364da2661108 | www.bouncycastle.org | Patch, Vendor Advisory |
| All releases of Legion of the Bouncy Castle Java Cryptography API – Freecode | af854a3a-2127-422b-91ae-364da2661108 | freshmeat.net | |
| www.osvdb.org/50358 | af854a3a-2127-422b-91ae-364da2661108 | www.osvdb.org | |
| www.osvdb.org/50360 | af854a3a-2127-422b-91ae-364da2661108 | www.osvdb.org | |
| www.osvdb.org/50359 | af854a3a-2127-422b-91ae-364da2661108 | www.osvdb.org | |
| bouncycastle.org | af854a3a-2127-422b-91ae-364da2661108 | www.bouncycastle.org | |
| bouncycastle.org :: dev-crypto :: [dev-crypto] Bouncy Castle Crypto Provider Package version 1.36 now available | af854a3a-2127-422b-91ae-364da2661108 | www.bouncycastle.org | Patch, Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 995463 Java (Maven) Security Update for bouncycastle:bcprov-jdk14 (GHSA-m26p-m559-g5j5)