CVE-2007-6340 Geert Moernaut LSrunasE 1.0 and Supercrypt 1.0 use the RC4 stream cipher without constructing a unique initialization vector (IV), which makes it easier for local users to obtain cleartext passwords.
LowCVSS 2.1
EPSS 0.30%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Geert Moernaut LSrunasE 1.0 and Supercrypt 1.0 use the RC4 stream cipher without constructing a unique initialization vector (IV), which makes it easier for local users to obtain cleartext passwords.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| moernaut lsrunase | = 1.0 | No fix listed |
| moernaut supercrypt | = 1.0 | No fix listed |
References
- 3611 third-party-advisory
- www.moernaut.com patch
- www.moernaut.com patch
- 20080129 Insecure Use of RC4 in LSrunasE and Supercrypt (CVE-2007-6340) mailing-list