CVE-2007-6721

The Legion of the Bouncy Castle Java Cryptography API before release 1.38, as used in Crypto Provider Package before 1.36, has unknown impact and remote attack vectors related to "a Bleichenbacher vulnerability in simple RSA CMS signatures without signed attributes."

Link	Resource
http://www.osvdb.org/50360
http://freshmeat.net/projects/bouncycastlecryptoapi/releases/265580
http://www.bouncycastle.org/devmailarchive/msg08195.html	Patch Vendor Advisory
http://www.osvdb.org/50358
http://www.bouncycastle.org/csharp/	Patch Vendor Advisory
http://www.osvdb.org/50359
http://www.bouncycastle.org/releasenotes.html

Configuration 1

---

Published : 2009-03-30 01:30

Updated : 2012-11-16 03:52

---

NVD link : CVE-2007-6721

Mitre link : CVE-2007-6721

No products.

NVD-CWE-noinfo