Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
4
CVSSv2

CVE-2011-5095

Published: 20/06/2012 Updated: 21/06/2012
CVSS v2 Base Score: 4 | Impact Score: 4.9 | Exploitability Score: 4.9
VMScore: 356
Vector: AV:N/AC:H/Au:N/C:P/I:P/A:N
Subscribe to Openssl

Vulnerability Summary

The Diffie-Hellman key-exchange implementation in OpenSSL 0.9.8, when FIPS mode is enabled, does not properly validate a public parameter, which makes it easier for man-in-the-middle malicious users to obtain the shared secret key by modifying network traffic, a related issue to CVE-2011-1923.

Vulnerable Product Search on Vulmon Subscribe to Product

openssl openssl 0.9.8

Vendor Advisories

Debian CVElist Bug Report Logs: openssl: CVE-2011-5095 - The remote SSL/TLS server accepts a weak Diffie-Hellman public value
Debian Bug report logs - #684527 openssl: CVE-2011-5095 - The remote SSL/TLS server accepts a weak Diffie-Hellman public value Package: openssl; Maintainer for openssl is Debian OpenSSL Team <pkg-openssl-devel@listsaliothdebianorg>; Source for openssl is src:openssl (PTS, buildd, popcon) Reported by: Arne Wichmann <aw@ ...

References

CWE-310http://www.nessus.org/plugins/index.php?view=single&id=53360http://www.cl.cam.ac.uk/~rja14/Papers/psandqs.pdfhttps://discussions.nessus.org/thread/3381https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=684527https://nvd.nist.gov
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-26925CVE-2023-41826LFICVE-2022-22364CVE-2024-2887command injectionremote code executionCVE-2024-34446CVE-2022-48699
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook