CVE-2006-4021 - The cryptographic module in ScatterChat 1.0.x allows attackers to identify patterns in large numbers

CVE-2006-4021

Summary

The cryptographic module in ScatterChat 1.0.x allows attackers to identify patterns in large numbers of messages by identifying collisions using a birthday attack on the custom padding mechanism for ECB mode encryption.

References

http://www.scatterchat.com/advisories/2006-01_tech.html
http://www.scatterchat.com/advisories/2006-01_non_tech.html
http://www.securityfocus.com/bid/19485
http://securityreason.com/securityalert/1396
http://www.securityfocus.com/archive/1/443038/100/100/threaded

Vulnerable Configurations

cpe:2.3:a:scatterchat:scatterchat:1.0.1:*:*:*:*:*:*:*
cpe:2.3:a:scatterchat:scatterchat:1.0.1:*:*:*:*:*:*:*

CVSS

Base:	2.6 (as of 14-02-2024 - 01:17)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	HIGH	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	NONE	NONE

cvss-vector via4

AV:N/AC:H/Au:N/C:P/I:N/A:N

refmap via4

bid	19485
bugtraq	20060811 ScatterChat Advisory 2006-01: Cryptanalytic Attack Vulnerability
confirm	http://www.scatterchat.com/advisories/2006-01_non_tech.html http://www.scatterchat.com/advisories/2006-01_tech.html
sreason	1396

Last major update

14-02-2024 - 01:17

Published

17-08-2006 - 21:04

Last modified

14-02-2024 - 01:17