CVE-2007-6755: Medium severity Dell Bsafe Crypto-c-micro-edition vulnerability
The NIST SP 800-90A default statement of the Dual Elliptic Curve Deterministic Random Bit Generation (DualECDRBG) algorithm contains point Q constants with a possible relationship to certain "skeleton key" values, which might allow context-dependent attackers to defeat cryptographic protection mechanisms by leveraging knowledge of those values. NOTE: this is a preliminary CVE for DualECDRBG; future research may provide additional details about point Q and associated attacks, and could potentially lead to a RECAST or REJECT of this CVE.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-6755?
CVE-2007-6755 is considered a high severity vulnerability due to its potential to compromise cryptographic functions.
How do I fix CVE-2007-6755?
To mitigate CVE-2007-6755, it is recommended to update to a version of Dell BSAFE that does not use the vulnerable Dual_EC_DRBG algorithm.
What software is affected by CVE-2007-6755?
CVE-2007-6755 affects the Dell BSAFE Crypto-C Micro Edition and BSAFE Crypto-J versions up to 5.0.1.
What are the risks associated with CVE-2007-6755?
The risks of CVE-2007-6755 include potential exposure to cryptographic attacks that could lead to unauthorized access to sensitive data.
Is CVE-2007-6755 an issue for all versions of affected software?
No, CVE-2007-6755 specifically impacts versions of the affected software up to certain specified limits, so newer versions should be assessed for security.