NVD

Id
58715  
Name
CVE-2007-6721  
Description
The Legion of the Bouncy Castle Java Cryptography API before release 1.38, as used in Crypto Provider Package before 1.36, has unknown impact and remote attack vectors related to "a Bleichenbacher vulnerability in simple RSA CMS signatures without signed attributes."  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-03-29  
Modified Date
2012-11-15  
Seq
2007-6721  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
301210 58715 CVE-2007-6721 http://freshmeat.net/projects/bouncycastlecryptoapi/releases/265580  View
301211 58715 CVE-2007-6721 http://www.bouncycastle.org/csharp/  View
301212 58715 CVE-2007-6721 [dev-crypto] 20071109 Bouncy Castle Crypto Provider Package version 1.36 now available  View
301213 58715 CVE-2007-6721 http://www.bouncycastle.org/releasenotes.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41709 JVNDB-2009-002716 Crypto Provider Package で使用される The Legion of the Bouncy Castle Java Cryptography API における詳細不明な脆弱性 Crypto Provider Package で使用される The Legion of the Bouncy Castle Java Cryptography API には、"符号化された属性を含まない単純な RSA CMS 署名内の Bleichenbacher の脆弱性" に関連する不備があるため、詳細不明な脆弱性が存在します。 CVE-2007-6721 30076 CVE-2007-6721 58715 10 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002716.html 2009-03-29 2012-06-26 View