PT-2012-2073 · Openssl+1 · Openssl+1
Publicado
2012-06-20
·
Atualizado
2014-10-24
·
CVE-2011-5095
CVSS v2.0
4.0
Média
| Vetor | AV:N/AC:H/Au:N/C:P/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
OpenSSL version 0.9.8
Description
The issue affects the Diffie-Hellman key-exchange implementation when FIPS mode is enabled, allowing man-in-the-middle attackers to obtain the shared secret key by modifying network traffic.
Recommendations
For OpenSSL version 0.9.8, update to a version that properly validates public parameters in the Diffie-Hellman key-exchange implementation to prevent man-in-the-middle attacks.
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Openssl
Suse