CVE-2006-0898

lowpriority · track · 11OT risk · elevatedEPSS 0.014 · 73 %ileEURUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

1.43% (73rd) EPSS

CVSS 2.6 · low

Is it mine?

37 products

Check your exposure

Who says so?

4 sources

enisa_euvd · fstec_bdu · nvd · redhat_csaf

EPSS · scored 2026-10-27

Crypt::CBC Perl module 2.16 and earlier, when running in RandomIV mode, uses an initialization vector (IV) of 8 bytes, which results in weaker encryption when used with a cipher that requires a larger block size than 8 bytes, such as Rijndael.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

Fixedjfreechart-0:0.9.20-3.rhn.noarch as a component of Red Hat Satellite 5.1 (RHEL v.4 AS)redhat_csaf
This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://www.redhat.com/docs/manuals/satellite/Red_Hat_Network_Satellite-5.1.0/html/Installation_Guide/s1-maintenance-update.html
https://access.redhat.com/errata/RHSA-2008:0630
Fixedmod_perl-0:2.0.2-12.el4.i386 as a component of Red Hat Satellite 5.1 (RHEL v.4 AS)redhat_csaf
This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://www.redhat.com/docs/manuals/satellite/Red_Hat_Network_Satellite-5.1.0/html/Installation_Guide/s1-maintenance-update.html
https://access.redhat.com/errata/RHSA-2008:0630
Fixedmod_perl-0:2.0.2-12.el4.s390 as a component of Red Hat Satellite 5.1 (RHEL v.4 AS)redhat_csaf
This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://www.redhat.com/docs/manuals/satellite/Red_Hat_Network_Satellite-5.1.0/html/Installation_Guide/s1-maintenance-update.html
https://access.redhat.com/errata/RHSA-2008:0630
Fixedmod_perl-0:2.0.2-12.el4.s390x as a component of Red Hat Satellite 5.1 (RHEL v.4 AS)redhat_csaf
This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://www.redhat.com/docs/manuals/satellite/Red_Hat_Network_Satellite-5.1.0/html/Installation_Guide/s1-maintenance-update.html
https://access.redhat.com/errata/RHSA-2008:0630
Fixedmod_perl-0:2.0.2-12.el4.x86_64 as a component of Red Hat Satellite 5.1 (RHEL v.4 AS)redhat_csaf
This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://www.redhat.com/docs/manuals/satellite/Red_Hat_Network_Satellite-5.1.0/html/Installation_Guide/s1-maintenance-update.html
https://access.redhat.com/errata/RHSA-2008:0630
Fixedmod_perl-debuginfo-0:2.0.2-12.el4.i386 as a component of Red Hat Satellite 5.1 (RHEL v.4 AS)redhat_csaf
This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://www.redhat.com/docs/manuals/satellite/Red_Hat_Network_Satellite-5.1.0/html/Installation_Guide/s1-maintenance-update.html
https://access.redhat.com/errata/RHSA-2008:0630
Fixedmod_perl-debuginfo-0:2.0.2-12.el4.s390 as a component of Red Hat Satellite 5.1 (RHEL v.4 AS)redhat_csaf
This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://www.redhat.com/docs/manuals/satellite/Red_Hat_Network_Satellite-5.1.0/html/Installation_Guide/s1-maintenance-update.html
https://access.redhat.com/errata/RHSA-2008:0630
Fixedmod_perl-debuginfo-0:2.0.2-12.el4.s390x as a component of Red Hat Satellite 5.1 (RHEL v.4 AS)redhat_csaf
This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://www.redhat.com/docs/manuals/satellite/Red_Hat_Network_Satellite-5.1.0/html/Installation_Guide/s1-maintenance-update.html
https://access.redhat.com/errata/RHSA-2008:0630
Fixedmod_perl-debuginfo-0:2.0.2-12.el4.x86_64 as a component of Red Hat Satellite 5.1 (RHEL v.4 AS)redhat_csaf
This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://www.redhat.com/docs/manuals/satellite/Red_Hat_Network_Satellite-5.1.0/html/Installation_Guide/s1-maintenance-update.html
https://access.redhat.com/errata/RHSA-2008:0630
Fixedperl-Crypt-CBC-0:2.24-1.el4.noarch as a component of Red Hat Satellite 5.1 (RHEL v.4 AS)redhat_csaf
This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://www.redhat.com/docs/manuals/satellite/Red_Hat_Network_Satellite-5.1.0/html/Installation_Guide/s1-maintenance-update.html
https://access.redhat.com/errata/RHSA-2008:0630
Fixedrhn-html-0:5.1.1-7.noarch as a component of Red Hat Satellite 5.1 (RHEL v.4 AS)redhat_csaf
This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://www.redhat.com/docs/manuals/satellite/Red_Hat_Network_Satellite-5.1.0/html/Installation_Guide/s1-maintenance-update.html
https://access.redhat.com/errata/RHSA-2008:0630
Fixedtomcat5-0:5.0.30-0jpp_10rh.noarch as a component of Red Hat Satellite 5.1 (RHEL v.4 AS)redhat_csaf
This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://www.redhat.com/docs/manuals/satellite/Red_Hat_Network_Satellite-5.1.0/html/Installation_Guide/s1-maintenance-update.html
https://access.redhat.com/errata/RHSA-2008:0630

cvss

Technical severity, 0–10. One row per scoring source.

2.6

010

base score 0–10 · higher = more severe · hover a vector to decode

v2.02.6lowAV:N/AC:H/Au:N/C:P/I:N/A:Nprimary · NVD / NIST USexploitability 4.9 · impact 2.9

v2.02.6lowAV:N/AC:H/Au:N/C:P/I:N/A:Nsecondary · FSTEC (BDU) RU

v2.02.2lowAV:N/AC:H/Au:N/C:P/I:N/A:N/E:Usecondary · CVSS-BT (t0sche)

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-327USLLM-inferred

affected products (37)

Products and version ranges known to be affected.

n/a n/a≤ n/aenisa_euvdEU
Сообщество свободного программного обеспечения Debian GNU/Linux≤ 3.1fstec_bduRU
lincoln d. stein crypt cbc≤ 2.16nvdUScpe:2.3:a:lincoln_d._stein:crypt_cbc:*:*:*:*:*:*:*:*
lincoln d. stein crypt cbc= 1.00nvdUScpe:2.3:a:lincoln_d._stein:crypt_cbc:*:*:*:*:*:*:*:*
lincoln d. stein crypt cbc= 1.10nvdUScpe:2.3:a:lincoln_d._stein:crypt_cbc:*:*:*:*:*:*:*:*
lincoln d. stein crypt cbc= 1.20nvdUScpe:2.3:a:lincoln_d._stein:crypt_cbc:*:*:*:*:*:*:*:*
lincoln d. stein crypt cbc= 1.21nvdUScpe:2.3:a:lincoln_d._stein:crypt_cbc:*:*:*:*:*:*:*:*
lincoln d. stein crypt cbc= 1.22nvdUScpe:2.3:a:lincoln_d._stein:crypt_cbc:*:*:*:*:*:*:*:*
lincoln d. stein crypt cbc= 1.24nvdUScpe:2.3:a:lincoln_d._stein:crypt_cbc:*:*:*:*:*:*:*:*
lincoln d. stein crypt cbc= 1.25nvdUScpe:2.3:a:lincoln_d._stein:crypt_cbc:*:*:*:*:*:*:*:*
lincoln d. stein crypt cbc= 2.00nvdUScpe:2.3:a:lincoln_d._stein:crypt_cbc:*:*:*:*:*:*:*:*
lincoln d. stein crypt cbc= 2.01nvdUScpe:2.3:a:lincoln_d._stein:crypt_cbc:*:*:*:*:*:*:*:*
lincoln d. stein crypt cbc= 2.02nvdUScpe:2.3:a:lincoln_d._stein:crypt_cbc:*:*:*:*:*:*:*:*
lincoln d. stein crypt cbc= 2.03nvdUScpe:2.3:a:lincoln_d._stein:crypt_cbc:*:*:*:*:*:*:*:*
lincoln d. stein crypt cbc= 2.04nvdUScpe:2.3:a:lincoln_d._stein:crypt_cbc:*:*:*:*:*:*:*:*
lincoln d. stein crypt cbc= 2.05nvdUScpe:2.3:a:lincoln_d._stein:crypt_cbc:*:*:*:*:*:*:*:*
lincoln d. stein crypt cbc= 2.07nvdUScpe:2.3:a:lincoln_d._stein:crypt_cbc:*:*:*:*:*:*:*:*
lincoln d. stein crypt cbc= 2.08nvdUScpe:2.3:a:lincoln_d._stein:crypt_cbc:*:*:*:*:*:*:*:*
lincoln d. stein crypt cbc= 2.09nvdUScpe:2.3:a:lincoln_d._stein:crypt_cbc:*:*:*:*:*:*:*:*
lincoln d. stein crypt cbc= 2.10nvdUScpe:2.3:a:lincoln_d._stein:crypt_cbc:*:*:*:*:*:*:*:*

showing 20 of 37

advisories (1)

Vendor and ecosystem advisories describing this.

RHSA-2008:0630Red Hat Security Advisory: Red Hat Network Satellite Server security update2008-08-13csaf · redhat_csafUS
Red Hat Network Satellite Server version 5.1.1 is now available. This update includes fixes for a number of security issues in Red Hat Network Satellite Server components. This update has been rated as having low security impact by the Red Hat Security Response Team.

also known as (5)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

enisa_euvd fstec_bdu nvd redhat_csaf NVD CVE.org MITRE

published 2006-02-25modified 2026-06-16

references (28)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan