Utimaco Safeguard Encryption Key Information Disclosure Vulnerability
BID:20529
Info
Utimaco Safeguard Encryption Key Information Disclosure Vulnerability
| Bugtraq ID: | 20529 |
| Class: | Design Error |
| CVE: |
CVE-2006-7142 |
| Remote: | No |
| Local: | Yes |
| Published: | Oct 13 2006 12:00AM |
| Updated: | Jul 06 2016 02:40PM |
| Credit: | Boom has been credited with the discovery of this vulnerability |
| Vulnerable: |
Utimaco Safeware SafeGuard Easy 4.30 |
| Not Vulnerable: | |
Discussion
Utimaco Safeguard Encryption Key Information Disclosure Vulnerability
Utimaco Safeguard Easy is prone to a local information-disclosure vulnerability because it fails to protect sensitive information from unprivileged users.
A local attacker may exploit this issue to obtain encryption keys used by the application. The attacker may then user this information to retrieve further information or to launch other attacks.
UPDATE: The vendor has released information refuting this vulnerability. Please see the referenced advisory for details.
Utimaco Safeguard Easy is prone to a local information-disclosure vulnerability because it fails to protect sensitive information from unprivileged users.
A local attacker may exploit this issue to obtain encryption keys used by the application. The attacker may then user this information to retrieve further information or to launch other attacks.
UPDATE: The vendor has released information refuting this vulnerability. Please see the referenced advisory for details.
Exploit / POC
Utimaco Safeguard Encryption Key Information Disclosure Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]
Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]
Solution / Fix
Utimaco Safeguard Encryption Key Information Disclosure Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Utimaco Safeguard Encryption Key Information Disclosure Vulnerability
References:
References:
- Utimaco Safeguard Easy vulnerability (boom)
- Statement on SafeGuard(R) Easy Articles regarding Configuration File (Utimaco)
- Utimaco Safeware Homepage (Utimaco Safeware)