ScatterChat ECB Mode Cryptographic Module Weakness

Bugtraq ID:	19485
Class:	Design Error
CVE:	CVE-2006-4021
Remote:	Yes
Local:	No
Published:	Aug 11 2006 12:00AM
Updated:	Aug 12 2006 12:00AM
Credit:	Steven Murdoch disclosed this vulnerability.
Vulnerable:	ScatterChat ScatterChat 1.0
Not Vulnerable:

ScatterChat ECB Mode Cryptographic Module Weakness

ScatterChat Instant Messenger is prone to a cryptographic weakness that may allow an attacker to detect patterns in encrypted client communications.

Information obtained may help the attacker conduct further attacks on the system.

ScatterChat ECB Mode Cryptographic Module Weakness

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]

ScatterChat ECB Mode Cryptographic Module Weakness

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected].

The vendor has released an advisory regarding this vulnerability; please see the reference section for details.

ScatterChat ECB Mode Cryptographic Module Weakness

References:

• ScatterChat Web Site (ScatterChat)
  
• ScatterChat Advisory 2006-01: Cryptanalytic Attack Vulnerability ("ScatterChat Advisories" )