CVE-2008-0580 Geert Moernaut LSrunasE and Supercrypt use an encryption key composed of an SHA1 hash of a fixed string embedded in the executable file, which makes it easier for local users to obtain this key withou...
LowCVSS 2.1
EPSS 0.19%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Geert Moernaut LSrunasE and Supercrypt use an encryption key composed of an SHA1 hash of a fixed string embedded in the executable file, which makes it easier for local users to obtain this key without reverse engineering.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| geert moernaut lsrunase | All versions | No fix listed |
| geert moernaut supercrypt | All versions | No fix listed |
References
- 3611 third-party-advisory
- 20080129 Insecure Use of RC4 in LSrunasE and Supercrypt (CVE-2007-6340) mailing-list
- 27500 vdb-entry