Nimrod Aviram

The issue is related to the lack of protection for internal data in the Tcl component of the operating system. It can be exploited by a remote attacker to obtain sensitive information by leveraging SSLv2 support.

The issue is related to the SSLv2 protocol, which requires a server to send a ServerVerify message before establishing that a client possesses certain plaintext RSA data. This makes it easier for remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, also known as a "DROWN" attack. The vulnerability can be exploited by capturing packets or acting as a man-in-the-middle to obtain SSL session keys, decrypt encrypted traffic, and obtain users' sensitive information. Additionally, a side-channel attack was found that could lead to the recovery of RSA keys due to cache-bank conflicts on the Intel Sandy-Bridge microarchitecture.

The issue is related to errors in cryptographic transformations in the OpenSSL library, specifically in the ssl/s2 srvr.c function. This can be exploited by a remote attacker to compromise the cryptographic protection mechanism by performing computations on SSLv2 traffic, related to the `get client master key` and `get client hello` functions. The vulnerability makes it easier for man-in-the-middle attackers to defeat cryptographic protection mechanisms.