CVE-2005-0809 | BDVDB-2026-8947 Detail

Description#

NotifyLink, when configured for client key retrieval, allows remote attackers to obtain AES keys via a direct request to /hwp/get.asp, then uses a weak encryption scheme (fixed byte reordering) to protect the key, which allows remote attackers to obtain the key via a brute force attack.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://secunia.com/advisories/14617
http://www.kb.cert.org/vuls/id/581068
http://www.securityfocus.com/bid/12843

Exploit#

No public exploit known

History#

Version 12005-03-20Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.