Description
iOpus Secure Email Attachments (SEA), probably 1.0, does not properly handle passwords that consist of repetitions of a substring, which allows attackers to decrypt files by entering only the substring.
References
- 20060425 Re: ADVISORY FOR IOPUS SECURE EMAIL ATTACHMENTS mailing-list
- 19771 third-party-advisory
- 1015980 vdb-entry
- iopus-insecure-passwords(26266) vdb-entry
- 20060422 ADVISORY FOR IOPUS SECURE EMAIL ATTACHMENTS mailing-list
- 17656 vdb-entry