NVD

Id
11355  
Name
CVE-2011-5095  
Description
The Diffie-Hellman key-exchange implementation in OpenSSL 0.9.8, when FIPS mode is enabled, does not properly validate a public parameter, which makes it easier for man-in-the-middle attackers to obtain the shared secret key by modifying network traffic, a related issue to CVE-2011-1923.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-07  
Published
2012-06-20  
Modified Date
2012-06-21  
Seq
2011-5095  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
62683 11355 CVE-2011-5095 http://www.cl.cam.ac.uk/~rja14/Papers/psandqs.pdf  View
62684 11355 CVE-2011-5095 http://www.nessus.org/plugins/index.php?view=single&id=53360  View
62685 11355 CVE-2011-5095 https://discussions.nessus.org/thread/3381  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
27102 JVNDB-2012-002809 OpenSSL の Diffie-Hellman 鍵共有の実装における共有秘密鍵を取得される脆弱性 OpenSSL の Diffie-Hellman 鍵共有の実装は、FIPS モードが有効な場合、public パラメータを適切に検証しないため、共有秘密鍵を取得される脆弱性が存在します。 CVE-2011-5095 53002 CVE-2011-5095 11355 4 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002809.html 2012-06-20 2012-06-22 View