The CheckGroup function in openSkat VTMF before 2.1 generates public key pairs in which the "p" variable might not be prime, which allows remote attackers to determine the private key and decrypt messages.
Weaknesses in this category are related to the design and implementation of data confidentiality and integrity. Frequently these deal with the use of encoding techniques, encryption libraries, and hashing algorithms. The weaknesses in this category could lead to a degradation of the quality data if they are not addressed.
Link | Tags |
---|---|
http://securitytracker.com/id?1012181 | vdb entry |
http://www.osvdb.org/11652 | vdb entry |
http://www.securityfocus.com/bid/11667 | vdb entry patch |
https://exchange.xforce.ibmcloud.com/vulnerabilities/18049 | vdb entry |
http://freshmeat.net/projects/openskat/?branch_id=36295&release_id=178549 | patch |