NetSight
low2.6

CVE-2006-0898

Crypt::CBC Perl module 2.16 and earlier, when running in RandomIV mode, uses an initialization vector (IV) of 8 bytes, which results in weaker encryption when …

Impact

Crypt::CBC Perl module 2.16 and earlier, when running in RandomIV mode, uses an initialization vector (IV) of 8 bytes, which results in weaker encryption when used with a cipher that requires a larger block size than 8 bytes, such as Rijndael.

Affected products

VendorProductAffected versions
Lincoln D. SteinCrypt Cbc
through 2.16
Versions 1.00, 1.10, 1.20, 1.21, 1.22

References