CVE-2011-5095

Name of the Vulnerable Software and Affected Versions OpenSSL version 0.9.8

Description The issue affects the Diffie-Hellman key-exchange implementation when FIPS mode is enabled, allowing man-in-the-middle attackers to obtain the shared secret key by modifying network traffic.

Recommendations For OpenSSL version 0.9.8, update to a version that properly validates public parameters in the Diffie-Hellman key-exchange implementation to prevent man-in-the-middle attacks.