NVD

Id
10041  
Name
CVE-2011-3389  
Description
The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initialization vectors, which allows man-in-the-middle attackers to obtain plaintext HTTP headers via a blockwise chosen-boundary attack (BCBA) on an HTTPS session, in conjunction with JavaScript code that uses (1) the HTML5 WebSocket API, (2) the Java URLConnection API, or (3) the Silverlight WebClient API, aka a "BEAST" attack.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2011-09-06  
Modified Date
2017-01-06  
Seq
2011-3389  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
57576 10041 CVE-2011-3389 http://blog.mozilla.com/security/2011/09/27/attack-against-tls-protected-communications/  View
57577 10041 CVE-2011-3389 http://blogs.technet.com/b/msrc/archive/2011/09/26/microsoft-releases-security-advisory-2588513.aspx  View
57578 10041 CVE-2011-3389 http://blogs.technet.com/b/srd/archive/2011/09/26/is-ssl-broken-more-about-security-advisory-2588513.aspx  View
57579 10041 CVE-2011-3389 http://downloads.asterisk.org/pub/security/AST-2016-001.html  View
57580 10041 CVE-2011-3389 http://ekoparty.org/2011/juliano-rizzo.php  View
57581 10041 CVE-2011-3389 http://eprint.iacr.org/2004/111  View
57582 10041 CVE-2011-3389 http://eprint.iacr.org/2006/136  View
57583 10041 CVE-2011-3389 http://googlechromereleases.blogspot.com/2011/10/chrome-stable-release.html  View
57584 10041 CVE-2011-3389 http://isc.sans.edu/diary/SSL+TLS+part+3+/11635  View
57585 10041 CVE-2011-3389 APPLE-SA-2011-10-12-1  View
57586 10041 CVE-2011-3389 APPLE-SA-2011-10-12-2  View
57587 10041 CVE-2011-3389 APPLE-SA-2012-02-01-1  View
57588 10041 CVE-2011-3389 APPLE-SA-2012-07-25-2  View
57589 10041 CVE-2011-3389 APPLE-SA-2012-05-09-1  View
57590 10041 CVE-2011-3389 APPLE-SA-2012-09-19-2  View
57591 10041 CVE-2011-3389 APPLE-SA-2013-10-22-3  View
57592 10041 CVE-2011-3389 SUSE-SU-2012:0114  View
57593 10041 CVE-2011-3389 SUSE-SU-2012:0122  View
57594 10041 CVE-2011-3389 HPSBUX02730  View
57595 10041 CVE-2011-3389 HPSBMU02742  View
57596 10041 CVE-2011-3389 SSRT100805  View
57597 10041 CVE-2011-3389 SSRT100854  View
57598 10041 CVE-2011-3389 SSRT100867  View
57599 10041 CVE-2011-3389 http://my.opera.com/securitygroup/blog/2011/09/28/the-beast-ssl-tls-issue  View
57600 10041 CVE-2011-3389 oval:org.mitre.oval:def:14752  View
57601 10041 CVE-2011-3389 RHSA-2013:1455  View
57602 10041 CVE-2011-3389 GLSA-201406-32  View
57603 10041 CVE-2011-3389 http://support.apple.com/kb/HT4999  View
57604 10041 CVE-2011-3389 http://support.apple.com/kb/HT5001  View
57605 10041 CVE-2011-3389 http://support.apple.com/kb/HT5130  View
57606 10041 CVE-2011-3389 http://support.apple.com/kb/HT5281  View
57607 10041 CVE-2011-3389 http://support.apple.com/kb/HT5501  View
57608 10041 CVE-2011-3389 http://support.apple.com/kb/HT6150  View
57609 10041 CVE-2011-3389 http://technet.microsoft.com/security/advisory/2588513  View
57610 10041 CVE-2011-3389 MS12-006  View
57611 10041 CVE-2011-3389 http://vnhacker.blogspot.com/2011/09/beast.html  View
57612 10041 CVE-2011-3389 http://www.apcmedia.com/salestools/SJHN-7RKGNM/SJHN-7RKGNM_R4_EN.pdf  View
57613 10041 CVE-2011-3389 http://www.educatedguesswork.org/2011/09/security_impact_of_the_rizzodu.html  View
57614 10041 CVE-2011-3389 http://www.ibm.com/developerworks/java/jdk/alerts/  View
57615 10041 CVE-2011-3389 http://www.imperialviolet.org/2011/09/23/chromeandbeast.html  View
57616 10041 CVE-2011-3389 http://www.insecure.cl/Beast-SSL.rar  View
57617 10041 CVE-2011-3389 VU#864643  View
57618 10041 CVE-2011-3389 http://www.opera.com/docs/changelogs/mac/1151/  View
57619 10041 CVE-2011-3389 http://www.opera.com/docs/changelogs/mac/1160/  View
57620 10041 CVE-2011-3389 http://www.opera.com/docs/changelogs/unix/1151/  View
57621 10041 CVE-2011-3389 http://www.opera.com/docs/changelogs/unix/1160/  View
57622 10041 CVE-2011-3389 http://www.opera.com/docs/changelogs/windows/1151/  View
57623 10041 CVE-2011-3389 http://www.opera.com/docs/changelogs/windows/1160/  View
57624 10041 CVE-2011-3389 http://www.opera.com/support/kb/view/1004/  View
57625 10041 CVE-2011-3389 http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html  View
57626 10041 CVE-2011-3389 http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html  View
57627 10041 CVE-2011-3389 http://www.oracle.com/technetwork/topics/security/javacpuoct2011-443431.html  View
57628 10041 CVE-2011-3389 RHSA-2011:1384  View
57629 10041 CVE-2011-3389 RHSA-2012:0006  View
57630 10041 CVE-2011-3389 49388  View
57631 10041 CVE-2011-3389 49778  View
57632 10041 CVE-2011-3389 1029190  View
57633 10041 CVE-2011-3389 1025997  View
57634 10041 CVE-2011-3389 1026103  View
57635 10041 CVE-2011-3389 USN-1263-1  View
57636 10041 CVE-2011-3389 TA12-010A  View
57637 10041 CVE-2011-3389 https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_fetchmail  View
57638 10041 CVE-2011-3389 https://bugzilla.novell.com/show_bug.cgi?id=719047  View
57639 10041 CVE-2011-3389 https://bugzilla.redhat.com/show_bug.cgi?id=737506  View
57640 10041 CVE-2011-3389 HPSBMU02900  View
57641 10041 CVE-2011-3389 openSUSE-SU-2012:0030  View
57642 10041 CVE-2011-3389 openSUSE-SU-2012:0063  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
32065 JVNDB-2011-002305 SSL と TLS の CBC モードに選択平文攻撃の脆弱性 SSL プロトコルと TLS プロトコルには、CBC モードで選択平文攻撃を受ける脆弱性が存在します。 CVE-2011-3389 51296 CVE-2011-3389 10041 4.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002305.html 2011-09-28 2016-01-27 View