CVE-2006-7142

The centralized management feature for Utimaco Safeguard stores hard-coded cryptographic keys in executable programs for encrypted configuration files, which allows attackers to recover the keys from the configuration files and decrypt the disk drive.

CVSS v2.0 4.1 MEDIUM

4.1^/10

CVSS v2.0 : MEDIUM

Vector : AV:L/AC:M/Au:S/C:P/I:P/A:P

Exploitability : 2.7 / Impact : 6.4

Access Vector LOCAL

Access Complexity MEDIUM

Authentication SINGLE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://www.utimaco.fi/servlets/ActionDispatcher?action:ws3_content_get_binary=true&scope=domain&domain_id=www.utimaco.fi&page_id=/templates/ajankohtaisteksti.jsp?ws3_page_id=tiedoteartikkeli_103&form_id=&component_id=linkin_dokumentti_104
http://www.securityfocus.com/bid/20529
http://www.securityfocus.com/archive/1/449120/100/0/threaded
http://www.securityfocus.com/archive/1/448598/100/0/threaded

Configurations

Configuration 1 (hide)

cpe:2.3:a:utimaco_safeware:safeguard_easy:4.30:*:*:*:*:*:*:*

Information

Published : 2007-03-07 20:19

Updated : 2018-10-16 16:29

NVD link : CVE-2006-7142

Mitre link : CVE-2006-7142

JSON object : View

Products Affected

utimaco_safeware

safeguard_easy

CWE

CWE-310

Cryptographic Issues

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://www.utimaco.fi/servlets/ActionDispatcher?action:ws3_content_get_binary=true&scope=domain&domain_id=www.utimaco.fi&page_id=/templates/ajankohtaisteksti.jsp?ws3_page_id=tiedoteartikkeli_103&form_id=&component_id=linkin_dokumentti_104", "name": "http://www.utimaco.fi/servlets/ActionDispatcher?action:ws3_content_get_binary=true&scope=domain&domain_id=www.utimaco.fi&page_id=/templates/ajankohtaisteksti.jsp?ws3_page_id=tiedoteartikkeli_103&form_id=&component_id=linkin_dokumentti_104", "tags": [], "refsource": "MISC"}, {"url": "http://www.securityfocus.com/bid/20529", "name": "20529", "tags": [], "refsource": "BID"}, {"url": "http://www.securityfocus.com/archive/1/449120/100/0/threaded", "name": "20061018 Re: Utimaco Safeguard Easy vulnerability", "tags": [], "refsource": "BUGTRAQ"}, {"url": "http://www.securityfocus.com/archive/1/448598/100/0/threaded", "name": "20061013 Utimaco Safeguard Easy vulnerability", "tags": [], "refsource": "BUGTRAQ"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "The centralized management feature for Utimaco Safeguard stores hard-coded cryptographic keys in executable programs for encrypted configuration files, which allows attackers to recover the keys from the configuration files and decrypt the disk drive."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-310"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2006-7142", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 4.1, "accessVector": "LOCAL", "vectorString": "AV:L/AC:M/Au:S/C:P/I:P/A:P", "authentication": "SINGLE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "severity": "MEDIUM", "impactScore": 6.4, "obtainAllPrivilege": false, "exploitabilityScore": 2.7, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false}}, "publishedDate": "2007-03-07T20:19Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:utimaco_safeware:safeguard_easy:4.30:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2018-10-16T16:29Z"}