Vulnerability Details CVE-2005-1600
A "mathematical flaw" in the implementation of the El Gamal signature algorithm for LibTomCrypt 1.0 to 1.0.2 allows attackers to generate valid signatures without having the private key.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 71.0%
CVSS Severity
CVSS v2 Score 7.5
References
- http://secunia.com/advisories/15233
- http://www.osvdb.org/16188
- http://www.securiteam.com/unixfocus/5JP092AFPG.html
- http://www.securityfocus.com/bid/13473
- http://www.securityfocus.org/archive/1/397649
- https://exchange.xforce.ibmcloud.com/vulnerabilities/20455
- http://secunia.com/advisories/15233
- http://www.osvdb.org/16188
- http://www.securiteam.com/unixfocus/5JP092AFPG.html
- http://www.securityfocus.com/bid/13473
- http://www.securityfocus.org/archive/1/397649
- https://exchange.xforce.ibmcloud.com/vulnerabilities/20455
Products affected by CVE-2005-1600
-
cpe:2.3:a:libtomcrypt:libtomcrypt:1.0
-
cpe:2.3:a:libtomcrypt:libtomcrypt:1.0.1
-
cpe:2.3:a:libtomcrypt:libtomcrypt:1.0.2