Vulnerability in Libtomcrypt

CVE-2005-1600

A "mathematical flaw" in the implementation of the El Gamal signature algorithm for LibTomCrypt 1.0 to 1.0.2 allows attackers to generate valid signatures without having the private key.

EPSS: 0.015 (70.9th percentile) — read the EPSS interpretation.

Affected products

  • Libtomcrypt — versions 1.0, 1.0.1, 1.0.2
  • N/a — versions n/a

References