CVE-1999-1100 Weak cryptography in n/a
Cisco PIX Private Link uses weak DES encryption due to improper command processing, allowing attackers to brute force keys and decrypt data.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-1999-1100?
CVE-1999-1100 is a high-severity vulnerability in n/a, published on 9 Mar 2002. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Cisco PIX Private Link 4.1.6 and earlier does not properly process certain commands in the configuration file, which reduces the effective key length of the DES key to 48 bits instead of 56 bits, which makes it easier for an attacker to find the proper key via a brute force attack.
Which versions are affected by CVE-1999-1100?
It affects 1 product.
Products include Cisco Pix Private Link.
How do I fix CVE-1999-1100?
No fix has been published for CVE-1999-1100 yet. Limit exposure of the affected software until one is available.
Is CVE-1999-1100 being exploited?
There is no known exploitation of CVE-1999-1100 in the wild and no public exploit code.
Sources
Also known as GHSA-mv5q-6rw5-rqwv.