CVE-2006-0898: Lincoln D. Stein Crypt Cbc

Low severity, CVSS 2.6. EPSS: 1.4% chance of exploitation in the next 30 days.

Crypt::CBC Perl module 2.16 and earlier, when running in RandomIV mode, uses an initialization vector (IV) of 8 bytes, which results in weaker encryption when used with a cipher that requires a larger block size than 8 bytes, such as Rijndael.

Affected products

• Lincoln D. Stein Crypt Cbc: up to and including 2.16; version 1.00 only; version 1.10 only; version 1.20 only; version 1.21 only; version 1.22 only; …

Published 2006-02-25. Last modified 2026-06-16.