CVE-2006-1116
- State
- Published
- Severity
- Not scored
- Published
- Mar 9, 2006
- Updated
- Aug 7, 2024
- Reserved
- Mar 9, 2006
Description
The CBC-MAC integrity functions in the nCipher nCore API before 2.18 transmit the initialization vector IV as part of a message when the implementation uses a non-zero IV, which allows remote attackers to bypass integrity checks and modify messages without being detected.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 20060308 nCipher Advisory #13: CBC-MAC IV misleading programming interfacemailing-list
- ADV-2006-0862vdb-entry
- ncipher-ncore-bypass-security(25062)vdb-entry
- 17011vdb-entry
- http://www.ncipher.com/resources/96/sa13_cbcmac_iv_misleading_programming_interface
- 1015718vdb-entry
- 19137third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.