Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2006-1116

Quick assessment

Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在nCipher nCore API 2.18之前版本中的CBC-MAC集成函数，当操作中使用一个非零IV时，将初始化向量IV作为短信发送，从而允许远程攻击者绕过完整性检查并修改短信而不被察觉。

AI Predicted 9.8 Difficulty: Easy EPSS 1.57% · P74
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2006-1116

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
The CBC-MAC integrity functions in the nCipher nCore API before 2.18 transmit the initialization vector IV as part of a message when the implementation uses a non-zero IV, which allows remote attackers to bypass integrity checks and modify messages without being detected.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
nCipher非安全CBC-MAC API漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
在nCipher nCore API 2.18之前版本中的CBC-MAC集成函数，当操作中使用一个非零IV时，将初始化向量IV作为短信发送，从而允许远程攻击者绕过完整性检查并修改短信而不被察觉。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2006-1116

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2006-1116

请登录查看更多情报信息。

Vendor Advisories for CVE-2006-1116 (6)

Other References for CVE-2006-1116 (1)

Same Patch Batch · n/a · 2006-03-09 · 58 CVEs total

CVE-2006-1110 Aztek Forum 跨站脚本攻击漏洞
CVE-2006-1122 D2KBlog 'Default.asp'跨站脚本攻击漏洞
CVE-2006-1125 AVG Anti-Virus本地不安全权限设置漏洞
CVE-2006-1124 RevilloC MailServer远程缓冲区溢出漏洞
CVE-2006-1123 D2KBlog多个SQL注入漏洞
CVE-2006-1126 Gallery X-Forwarded-For HTTP头进行IP地址欺骗漏洞
CVE-2006-1114 Loudblog多个输入验证漏洞
CVE-2006-1113 Loudblog 'podcast.php'SQL注入漏洞
CVE-2006-1112 Aztek Forum HTML注入漏洞
CVE-2006-1111 Aztek Forum HTML注入漏洞
CVE-2006-1115 nCipher Diffie-Hellman以不安全方式生成密钥漏洞
CVE-2006-1109 TotalECommerce 'index.asp' SQL注入漏洞
CVE-2006-1108 NMDeluxe 'News.PHP'多个输入验证漏洞
CVE-2006-1107 NMDeluxe 'News.PHP'跨站脚本攻击漏洞
CVE-2006-1106 Pixelpost多个输入验证漏洞
CVE-2006-1105 Pixelpost includes/phpinfo.php多个输入验证漏洞
CVE-2006-1104 Pixelpost多个输入验证漏洞
CVE-2006-1103 Sauerbraten 'engine/server.cpp'多个远程漏洞
CVE-2006-1102 Sauerbraten多个远程漏洞
CVE-2006-1101 Sauerbraten多个远程漏洞

Showing top 20 of 58 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2006-1116

No comments yet

Leave a comment