BID:11667

OpenSkat Weak Encryption Key Generation Vulnerability

Info

OpenSkat Weak Encryption Key Generation Vulnerability

Bugtraq ID:	11667
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Nov 12 2004 12:00AM
Updated:	Nov 12 2004 12:00AM
Credit:	The individual responsible for the discovery of this issue is currently unknown; the vendor disclosed this issue.
Vulnerable:	OpenSkat OpenSkat 2.0 OpenSkat OpenSkat 1.9 OpenSkat OpenSkat 1.8 OpenSkat OpenSkat 1.7 OpenSkat OpenSkat 1.6 OpenSkat OpenSkat 1.5 OpenSkat OpenSkat 1.4 OpenSkat OpenSkat 1.3 OpenSkat OpenSkat 1.2 OpenSkat OpenSkat 1.1

Not Vulnerable:	OpenSkat OpenSkat 2.1

Discussion

OpenSkat Weak Encryption Key Generation Vulnerability

A weak encryption key generation vulnerability affects openSkat. This issue is due to a design error that causes the application to generate weak encryption keys.

An attacker may leverage this issue to derive the private keys of a user running the vulnerable application through factorization attacks.

Exploit / POC

OpenSkat Weak Encryption Key Generation Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Solution / Fix

OpenSkat Weak Encryption Key Generation Vulnerability

Solution:
The vendor has released an upgrade dealing with this issue.

OpenSkat OpenSkat 1.1