iOpus Secure Email Attachments Encryption Weakness
BID:17656
Info
iOpus Secure Email Attachments Encryption Weakness
| Bugtraq ID: | 17656 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 22 2006 12:00AM |
| Updated: | Apr 24 2006 05:46PM |
| Credit: | Discovered by NtWaK0, Noph0bia. |
| Vulnerable: |
iOpus iOpus Secure Email Attachments 0 |
| Not Vulnerable: | |
Discussion
iOpus Secure Email Attachments Encryption Weakness
iOpus Secure Email Attachments is susceptible to an insecure-encryption weakness. This issue is due to a design flaw in the encryption algorithm used in the application.
The insecure method of encrypting attachments may result in a substantially less than brute-force attack against certain passwords used to encrypt attachments.
iOpus Secure Email Attachments is susceptible to an insecure-encryption weakness. This issue is due to a design flaw in the encryption algorithm used in the application.
The insecure method of encrypting attachments may result in a substantially less than brute-force attack against certain passwords used to encrypt attachments.
Exploit / POC
iOpus Secure Email Attachments Encryption Weakness
An attacker uses standard encryption utilities to exploit this issue.
An attacker uses standard encryption utilities to exploit this issue.
Solution / Fix
iOpus Secure Email Attachments Encryption Weakness
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]
References
iOpus Secure Email Attachments Encryption Weakness
References:
References: