PT-2012-2073
CVE-2011-5095
·
تاريخ النشر
2012-06-20
·
تاريخ التحديث
2014-10-24
الوصف من
CVSS 2.0
4.0
متوسطةالمقاييسAV:N/AC:H/Au:N/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions
OpenSSL version 0.9.8
Description
The issue affects the Diffie-Hellman key-exchange implementation when FIPS mode is enabled, allowing man-in-the-middle attackers to obtain the shared secret key by modifying network traffic.
Recommendations
For OpenSSL version 0.9.8, update to a version that properly validates public parameters in the Diffie-Hellman key-exchange implementation to prevent man-in-the-middle attacks.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾