CVE-2007-6755 Weak cryptography in n/a
Attackers with knowledge of specific constants can defeat cryptographic protections in the Dual_EC_DRBG algorithm, compromising data confidentiality.
- Exploited in the wild
- Not known
- Login needed
- Not stated
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2007-6755?
CVE-2007-6755 is a medium-severity vulnerability in n/a, published on 11 Oct 2013. It can be exploited over the network, with no action from the victim.
Official description
The NIST SP 800-90A default statement of the Dual Elliptic Curve Deterministic Random Bit Generation (Dual_EC_DRBG) algorithm contains point Q constants with a possible relationship to certain "skeleton key" values, which might allow context-dependent attackers to defeat cryptographic protection mechanisms by leveraging knowledge of those values. NOTE: this is a preliminary CVE for Dual_EC_DRBG; future research may provide additional details about point Q and associated attacks, and could potentially lead to a RECAST or REJECT of this CVE.
Weakness: CWE-327
Which versions are affected by CVE-2007-6755?
It affects 2 products.
Products include Dell Bsafe Crypto-C-Micro-Edition, Dell Bsafe Crypto-J.
How do I fix CVE-2007-6755?
No fix published yet.
Is CVE-2007-6755 being exploited?
There is no known exploitation of CVE-2007-6755 in the wild and no public exploit code.
Other vulnerabilities in n/a
- CVE-2020-35169 Other in Dell BSAFE Crypto-C Micro Edition
- CVE-2020-29504 Weak cryptography in BSAFE Crypto-C Micro Edition
- CVE-2020-29505 Weak cryptography in Dell BSAFE Crypto-C Micro Edition
- CVE-2020-29506 Information disclosure in Dell BSAFE Crypto-C Micro Edition
- CVE-2020-35164 Information disclosure in Dell BSAFE Crypto-C Micro Edition
Sources
Also known as DEBIAN-CVE-2007-6755, GHSA-3mqf-x495-xqrw.