BID:16802

Lincoln D. Stein Crypt::CBC Perl Module Weak Ciphertext Vulnerability

Info

Lincoln D. Stein Crypt::CBC Perl Module Weak Ciphertext Vulnerability

Bugtraq ID:	16802
Class:	Design Error
CVE:	CVE-2006-0898
Remote:	Yes
Local:	Yes
Published:	Feb 24 2006 12:00AM
Updated:	Aug 25 2008 10:46PM
Credit:	The vendor disclosed this issue.
Vulnerable:	SuSE SUSE Linux Enterprise Server 8 + Linux kernel 2.4.21 + Linux kernel 2.4.19 SuSE Linux Openexchange Server SuSE Linux Enterprise Server 9 SuSE Linux Desktop 1.0 S.u.S.E. UnitedLinux 1.0 S.u.S.E. SuSE Linux School Server for i386 S.u.S.E. SUSE LINUX Retail Solution 8.0 S.u.S.E. SuSE Linux Openexchange Server 4.0 S.u.S.E. SuSE Linux Open-Xchange 4.1 S.u.S.E. Open-Enterprise-Server 9.0 S.u.S.E. Open-Enterprise-Server 1 S.u.S.E. Office Server S.u.S.E. Novell Linux Desktop 9.0 S.u.S.E. Novell Linux Desktop 1.0 S.u.S.E. Linux Professional 10.0 OSS S.u.S.E. Linux Professional 10.0 S.u.S.E. Linux Professional 9.3 x86_64 S.u.S.E. Linux Professional 9.3 S.u.S.E. Linux Professional 9.2 x86_64 S.u.S.E. Linux Professional 9.2 S.u.S.E. Linux Professional 9.1 x86_64 S.u.S.E. Linux Professional 9.1 S.u.S.E. Linux Professional 10.1 S.u.S.E. Linux Personal 10.0 OSS S.u.S.E. Linux Personal 9.3 x86_64 S.u.S.E. Linux Personal 9.3 S.u.S.E. Linux Personal 9.2 x86_64 S.u.S.E. Linux Personal 9.2 S.u.S.E. Linux Personal 9.1 x86_64 S.u.S.E. Linux Personal 9.1 S.u.S.E. Linux Personal 10.1 S.u.S.E. Linux Office Server S.u.S.E. Linux Enterprise Server for S/390 9.0 S.u.S.E. Linux Enterprise Server for S/390 S.u.S.E. Linux Database Server 0 S.u.S.E. Linux Connectivity Server Redhat Red Hat Network Satellite Server 5.0 Redhat Red Hat Network Satellite Server 4.2 Redhat Network Satellite (for RHEL 4) 5.1 Redhat Network Satellite (for RHEL 4) 4.2 Redhat Network Satellite (for RHEL 3) 4.2 Lincoln D. Stein Crypt::CBC 2.16 Lincoln D. Stein Crypt::CBC 2.15 Lincoln D. Stein Crypt::CBC 2.14 Lincoln D. Stein Crypt::CBC 2.13 Lincoln D. Stein Crypt::CBC 2.12 Lincoln D. Stein Crypt::CBC 2.11 Lincoln D. Stein Crypt::CBC 2.10 Lincoln D. Stein Crypt::CBC 2.09 Lincoln D. Stein Crypt::CBC 2.08 Lincoln D. Stein Crypt::CBC 2.07 Lincoln D. Stein Crypt::CBC 2.05 Lincoln D. Stein Crypt::CBC 2.04 Lincoln D. Stein Crypt::CBC 2.03 Lincoln D. Stein Crypt::CBC 2.02 Lincoln D. Stein Crypt::CBC 2.01 Lincoln D. Stein Crypt::CBC 2.00 Lincoln D. Stein Crypt::CBC 1.25 Lincoln D. Stein Crypt::CBC 1.24 Lincoln D. Stein Crypt::CBC 1.22 Lincoln D. Stein Crypt::CBC 1.21 Lincoln D. Stein Crypt::CBC 1.20 Lincoln D. Stein Crypt::CBC 1.10 Lincoln D. Stein Crypt::CBC 1.00 Gentoo Linux Debian Linux 3.1 sparc Debian Linux 3.1 s/390 Debian Linux 3.1 ppc Debian Linux 3.1 mipsel Debian Linux 3.1 mips Debian Linux 3.1 m68k Debian Linux 3.1 ia-64 Debian Linux 3.1 ia-32 Debian Linux 3.1 hppa Debian Linux 3.1 arm Debian Linux 3.1 amd64 Debian Linux 3.1 alpha Debian Linux 3.1

Not Vulnerable:	Lincoln D. Stein Crypt::CBC 2.17

Discussion

Lincoln D. Stein Crypt::CBC Perl Module Weak Ciphertext Vulnerability

Crypt::CBC is prone to a weak-ciphertext vulnerability. This issue stems from a flaw in its creation of IVs (Initialization Vectors) for ciphers with a blocksize larger than 8.

This issue results in the creation of ciphertext that contains bytes encrypted with a constant null IV. This ciphertext is prone to differential cryptanalysis, aiding attackers in compromising the plaintext of encrypted data.

The level of difficulty attackers may face trying to exploit this flaw is currently unknown, but data encrypted with vulnerable versions of Crypt::CBC should be considered insecure.

Versions prior to Crypt::CBC 2.17 are vulnerable to this issue if they use the 'RandomIV' header style.

Exploit / POC

Lincoln D. Stein Crypt::CBC Perl Module Weak Ciphertext Vulnerability

Software designed to perform cryptanalysis is required.

Depending on the methods used to gain access to the cyphertext, such as exploiting latent vulnerabilities in other software, exploit code may also be required.

Solution / Fix

Lincoln D. Stein Crypt::CBC Perl Module Weak Ciphertext Vulnerability

Solution:
The vendor has released Crypt::CBC 2.17 to address this issue. Please see the references for more information and advisories.

Lincoln D. Stein Crypt::CBC 1.25