CVE

Id
26885  
CVE No.
CVE-2007-3528  
Status
Candidate  
Description
The blowfish mode in DAR before 2.3.4 uses weak Blowfish-CBC cryptography by (1) discarding random bits by the blowfish::make_ivec function in libdar/crypto.cpp that results in predictable and repeating IV values, and (2) direct use of a password for keying, which makes it easier for context-dependent attackers to decrypt files.  
Phase
Assigned (20070703)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
274445 26885 CVE-2007-3528 CONFIRM:http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=425335  View
274446 26885 CVE-2007-3528 CONFIRM:https://sourceforge.net/forum/forum.php?forum_id=711619  View
274447 26885 CVE-2007-3528 CONFIRM:https://sourceforge.net/forum/forum.php?forum_id=711620  View
274448 26885 CVE-2007-3528 CONFIRM:https://sourceforge.net/tracker/index.php?func=detail&aid=1730439&group_id=65612&atid=511612  View
274449 26885 CVE-2007-3528 BID:24930  View
274450 26885 CVE-2007-3528 URL:http://www.securityfocus.com/bid/24930  View
274451 26885 CVE-2007-3528 OSVDB:38189  View
274452 26885 CVE-2007-3528 URL:http://osvdb.org/38189  View
274453 26885 CVE-2007-3528 OSVDB:38190  View
274454 26885 CVE-2007-3528 URL:http://osvdb.org/38190  View
274455 26885 CVE-2007-3528 SECUNIA:25953  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
57102 JVNDB-2007-005794 PHPDirector における権限を取得される脆弱性 PHPDirector は、admin アカウント名およびパスワードを config.php 内に格納するため、権限を取得される脆弱性が存在します。 CVE-2007-3530 26885 7.2 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005794.html  View