CVE-2005-1600

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-05-16 · updated 2026-06-16

Description

A "mathematical flaw" in the implementation of the El Gamal signature algorithm for LibTomCrypt 1.0 to 1.0.2 allows attackers to generate valid signatures without having the private key.

Affected products

Libtomcrypt: 1.0, 1.0.1, 1.0.2

References

http://secunia.com/advisories/15233
http://www.osvdb.org/16188
http://www.securiteam.com/unixfocus/5JP092AFPG.html
http://www.securityfocus.com/bid/13473
http://www.securityfocus.org/archive/1/397649
https://exchange.xforce.ibmcloud.com/vulnerabilities/20455
http://secunia.com/advisories/15233
http://www.osvdb.org/16188
http://www.securiteam.com/unixfocus/5JP092AFPG.html
http://www.securityfocus.com/bid/13473
http://www.securityfocus.org/archive/1/397649
https://exchange.xforce.ibmcloud.com/vulnerabilities/20455

Get alerted when CVE-2005-1600 or the next vulnerability affects your stack