Description
A "mathematical flaw" in the implementation of the El Gamal signature algorithm for LibTomCrypt 1.0 to 1.0.2 allows attackers to generate valid signatures without having the private key.
Metrics
CVSS 2.0 7.5/10
AV:N/AC:L/Au:N/C:P/I:P/A:PAffected software
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
References
- http://secunia.com/advisories/15233
- http://www.osvdb.org/16188
- http://www.securiteam.com/unixfocus/5JP092AFPG.html
- http://www.securityfocus.com/bid/13473
- http://www.securityfocus.org/archive/1/397649
- https://exchange.xforce.ibmcloud.com/vulnerabilities/20455
- http://secunia.com/advisories/15233
- http://www.osvdb.org/16188
- http://www.securiteam.com/unixfocus/5JP092AFPG.html
- http://www.securityfocus.com/bid/13473
- http://www.securityfocus.org/archive/1/397649
- https://exchange.xforce.ibmcloud.com/vulnerabilities/20455
Timeline
- Published
- May 16, 2005
- Last modified
- Jun 16, 2026
- NVD status
- Modified