CVE-2006-0898

CVE-2006-0898 describes a weakness in the Crypt::CBC Perl module, versions 2.16 and earlier, specifically when operating in RandomIV mode. The module's use of an 8-byte Initialization Vector (IV) significantly weakens encryption when paired with ciphers requiring larger block sizes, such as Rijndael, potentially leading to partial disclosure of sensitive information. This vulnerability carries a low CVSS score of 2.6, indicating a network-based attack with high access complexity and a partial impact on confidentiality. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.