PT-2007-1088 · Openssl+1 · Openssl+1
Publicado
2007-08-08
·
Atualizado
2024-06-15
·
CVE-2007-3108
CVSS v2.0
10
Alta
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions:
OpenSSL versions 0.9.8e and earlier
Description:
The issue concerns a problem with Montgomery multiplication in the BN from montgomery function, potentially allowing local users to conduct a side-channel attack and retrieve RSA private keys. Additionally, there are multiple vulnerabilities in the OpenSSL package that can lead to breaches of confidentiality, integrity, and availability of protected information, and these can be exploited remotely.
Recommendations:
For OpenSSL versions 0.9.8e and earlier, update to a version later than 0.9.8e to resolve the issue.
As a temporary workaround, consider restricting access to sensitive information and RSA private keys to minimize the risk of exploitation.
Correção
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Openssl
Red Hat