CVE-2007-6721

Description

The Legion of the Bouncy Castle Java Cryptography API before release 1.38, as used in Crypto Provider Package before 1.36, has unknown impact and remote attack vectors related to "a Bleichenbacher vulnerability in simple RSA CMS signatures without signed attributes."

References

http://www.osvdb.org/50360

http://www.osvdb.org/50359

http://www.osvdb.org/50358

http://www.bouncycastle.org/releasenotes.html

http://www.bouncycastle.org/devmailarchive/msg08195.html

http://www.bouncycastle.org/csharp/

http://freshmeat.net/projects/bouncycastlecryptoapi/releases/265580

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS