CVE-2007-6721

{"id": "CVE-2007-6721", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 10.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": true, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2009-03-30T01:30:00.217", "references": [{"url": "http://freshmeat.net/projects/bouncycastlecryptoapi/releases/265580", "source": "cve@mitre.org"}, {"url": "http://www.bouncycastle.org/csharp/", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.bouncycastle.org/devmailarchive/msg08195.html", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.bouncycastle.org/releasenotes.html", "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/50358", "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/50359", "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/50360", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "The Legion of the Bouncy Castle Java Cryptography API before release 1.38, as used in Crypto Provider Package before 1.36, has unknown impact and remote attack vectors related to \"a Bleichenbacher vulnerability in simple RSA CMS signatures without signed attributes.\""}, {"lang": "es", "value": "La Legi\u00f3n de la API de Bouncy Castle Java Cryptography anterior a versi\u00f3n 1.38, como es usada en Crypto Provider Package anterior a versi\u00f3n 1.36, presenta un impacto desconocido y vectores de ataque remoto relacionados con \"a Bleichenbacher vulnerability in simple RSA CMS signatures without signed attributes\"."}], "lastModified": "2012-11-16T03:52:42.540", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0A90E211-7A81-4DDE-9774-56A63E0CD8F3", "versionEndIncluding": "1.37"}, {"criteria": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.01:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FAF60BAE-BA1B-49A3-B594-3B7336F602AD"}, {"criteria": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.02:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AFDD300D-43A1-4E72-9BB6-E3141A7B3CF4"}, {"criteria": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.03:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D0C5F2A1-BBE1-4EC1-8324-64A8DC19DCE9"}, {"criteria": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.04:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "663B6F4C-1997-4651-ADA0-E061BBCA543F"}, {"criteria": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.05:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "311A950B-0152-4556-B7A0-8A1D355A095D"}, {"criteria": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.06:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D8778B34-92B6-41F7-AA5E-55127155C6D1"}, {"criteria": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.07:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3E1EAB5C-D9FE-4499-9FF2-D7C498A5CD38"}, {"criteria": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.08:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3A14408B-F008-4AFB-A3C4-E468E5D8871B"}, {"criteria": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.09:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9EF6CBA3-D974-4D9D-A5C6-5E8CB9C5E7D9"}, {"criteria": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "02092572-B188-4A8E-9745-1E93DEA818BF"}, {"criteria": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.11:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2FC51E9F-1B88-499C-B2D1-BC5B1427F5AB"}, {"criteria": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.12:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C5FC15CF-FC0E-4E74-9936-546E51C86975"}, {"criteria": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.13:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "318F8819-2E27-4E5C-A62E-DBEE060AACD6"}, {"criteria": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.14:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "01B57AD2-B600-4949-91DE-87D3EAEEE01E"}, {"criteria": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.15:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "63CE9915-2F36-4EE7-AEAE-7BA641ECAD1B"}, {"criteria": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.16:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E263B817-CA65-40E4-8BC9-D195A0F88E16"}, {"criteria": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.17:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "31451E1E-4CCA-4B8B-AEB9-9C8A9918B9C5"}, {"criteria": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.18:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5A3438ED-8462-40E5-B433-9F67ED9A9110"}, {"criteria": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.19:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E3258C44-1D6E-4019-B332-80505B6B7B4C"}, {"criteria": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.20:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C0BB004D-1C69-4B39-890A-AE70D27518A3"}, {"criteria": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.21:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2ACBC626-EDBD-4C75-87ED-C78066670140"}, {"criteria": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.22:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2C3D8290-1839-4219-87C1-1A10FF5CF835"}, {"criteria": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.23:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4E605FF3-E6D8-4364-B098-4265CC490AD2"}, {"criteria": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.24:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E257CDDF-1D45-40F6-AF90-51B455440EA4"}, {"criteria": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.25:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "85AA3FAB-F49F-4CC1-86E4-A2BCC90EAA6E"}, {"criteria": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.26:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5A8D2C13-72E2-4139-8EF6-2ABB21F6B199"}, {"criteria": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.27:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "46AFFBE0-63F9-47E0-BDE4-73E9C3A30D4F"}, {"criteria": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.28:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CD114491-F727-4B7D-91C9-C20583035273"}, {"criteria": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.29:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "12303E74-5E98-4F98-A21C-11EE30B74FDB"}, {"criteria": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.30:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B6F306E2-E7DE-45F9-880B-391F5BABE2C5"}, {"criteria": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.31:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FCB1F2FE-E911-438F-8CED-A77055231E7D"}, {"criteria": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.32:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C3AB6C8A-F2DD-42F7-B5B6-71E0EC1FCCCC"}, {"criteria": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.33:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8FB8EA15-253A-4A29-ACD4-FCCC217CC157"}, {"criteria": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.34:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0961397F-1859-41F9-A817-304D781BB050"}, {"criteria": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.35:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "74052375-8653-494A-A4DF-012075DE91CF"}, {"criteria": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.36:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AEC6A374-2903-4E0C-A1C7-664B4F61AE92"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0A91B639-B1FE-4794-845C-31D614B6EB2A", "versionEndIncluding": "1.35"}, {"criteria": "cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AEE7175F-DC6C-4555-B9E0-0FCA0B86B826"}, {"criteria": "cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.01:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E6019D20-B7C5-45E9-80A9-EF6A484E2307"}, {"criteria": "cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.02:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F74E7270-0289-4967-A291-5A03053CB68A"}, {"criteria": "cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.03:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BA120555-B228-471C-B00A-01F2D5144FD1"}, {"criteria": "cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.3.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AA3B4F44-B349-43A3-801F-38FCB53838E4"}, {"criteria": "cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.04:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A06BA9F6-30E4-4141-A995-A0F63ABF9D25"}, {"criteria": "cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.05:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DD5FEAE4-3792-4778-A199-CAEA59A66068"}, {"criteria": "cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.06:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1FB8FAE6-C6DA-456C-839D-A241493F54D1"}, {"criteria": "cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.07:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "85BDABE2-E5A5-453C-B1EF-66EA5001191B"}, {"criteria": "cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.08:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "083BB632-3482-4D99-9515-7D3969FA5577"}, {"criteria": "cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.09:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "79EB74F9-E4A0-4C3F-9CCC-2157A8DD7EDE"}, {"criteria": "cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.11:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "80AE1A3C-4A65-4C49-9C92-B196AF6EBFD6"}, {"criteria": "cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.12:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B43C3258-E651-4595-83D0-1E370DA2A969"}, {"criteria": "cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.13:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "15899226-AE31-49B3-9C66-78E85FC4B628"}, {"criteria": "cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.14:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A0221377-D94B-4FAD-BAC9-C7179A4D355D"}, {"criteria": "cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.15:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B2EA98CD-0647-4C0C-B33B-55EEC218D69A"}, {"criteria": "cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.16:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8CC3C505-D136-4218-88E4-A89DE05E372D"}, {"criteria": "cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.17:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3D3DB77B-8E44-4A11-97C8-F4736C40EA72"}, {"criteria": "cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.18:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "35DB68BA-906A-4B58-B93B-59E237A2DFB8"}, {"criteria": "cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.19:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "423494D6-B192-4182-8B6E-AD6BB8E0DED9"}, {"criteria": "cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.20:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D05202FC-AC0B-4F66-BEBA-E8C1D650D9A8"}, {"criteria": "cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.21:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E9BE90FD-346A-4E1C-A768-333000ACE323"}, {"criteria": "cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.22:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "393BCDA6-ED42-4173-8022-2CD1487EF004"}, {"criteria": "cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.23:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5F8237FE-937B-41AD-AB1B-8331FF409550"}, {"criteria": "cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.24:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9333C3E7-0050-4AB5-83FC-E683CCCAF614"}, {"criteria": "cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.25:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "45EACB03-5B75-49D4-A24D-4117045BBE53"}, {"criteria": "cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.26:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7483646A-B9B4-4D14-BF02-900A1405F1FD"}, {"criteria": "cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.27:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D7BE8753-AA5A-4B71-96C4-D0F30F0FDF04"}, {"criteria": "cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.28:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A8967308-CB4F-47AB-8761-A8AC27247D17"}, {"criteria": "cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.29:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "46FD4731-2314-465F-B9D7-CC907EC8CE42"}, {"criteria": "cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.30:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5E50EB43-2389-4D6C-BAFA-2B024F521FAC"}, {"criteria": "cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.32:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D8FBEB87-300E-4245-867D-3CC79163B941"}, {"criteria": "cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.33:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E48550BA-18A0-4682-9F83-71B8294FEC4A"}, {"criteria": "cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.34:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B462DAC1-4037-468F-897B-05CDFAFA4DB3"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cve@mitre.org"}