medium
5.8
CWE
327
Advisory Published
Rejected
Updated

CVE-2007-6755

First published: Fri Oct 11 2013(Updated: )

The NIST SP 800-90A default statement of the Dual Elliptic Curve Deterministic Random Bit Generation (Dual_EC_DRBG) algorithm contains point Q constants with a possible relationship to certain "skeleton key" values, which might allow context-dependent attackers to defeat cryptographic protection mechanisms by leveraging knowledge of those values. NOTE: this is a preliminary CVE for Dual_EC_DRBG; future research may provide additional details about point Q and associated attacks, and could potentially lead to a RECAST or REJECT of this CVE.

Credit: secalert_us@oracle.com

Affected SoftwareAffected VersionHow to fix
Dell BSAFE crypto-c-micro-edition>=3.0.0.0<=3.0.0.20
Dell BSAFE Crypto-J=5.0
Dell BSAFE Crypto-J=5.0.1

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Frequently Asked Questions

  • What is the severity of CVE-2007-6755?

    CVE-2007-6755 is considered a high severity vulnerability due to its potential to compromise cryptographic functions.

  • How do I fix CVE-2007-6755?

    To mitigate CVE-2007-6755, it is recommended to update to a version of Dell BSAFE that does not use the vulnerable Dual_EC_DRBG algorithm.

  • What software is affected by CVE-2007-6755?

    CVE-2007-6755 affects the Dell BSAFE Crypto-C Micro Edition and BSAFE Crypto-J versions up to 5.0.1.

  • What are the risks associated with CVE-2007-6755?

    The risks of CVE-2007-6755 include potential exposure to cryptographic attacks that could lead to unauthorized access to sensitive data.

  • Is CVE-2007-6755 an issue for all versions of affected software?

    No, CVE-2007-6755 specifically impacts versions of the affected software up to certain specified limits, so newer versions should be assessed for security.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203