NVD

Id
55262  
Name
CVE-2007-3108  
Description
The BN_from_montgomery function in crypto/bn/bn_mont.c in OpenSSL 0.9.8e and earlier does not properly perform Montgomery multiplication, which might allow local users to conduct a side-channel attack and retrieve RSA private keys.  
Reject
 
CVSS Version
2  
CVSS Score
1.2  
Severity
Low  
CVSS Base Score
1.2  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
1.9  
CVSS Vector
(AV:L/AC:H/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2007-08-07  
Modified Date
2011-03-07  
Seq
2007-3108  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
280882 55262 CVE-2007-3108 http://cvs.openssl.org/chngview?cn=16275  View
280883 55262 CVE-2007-3108 [Security-announce] 20080107 VMSA-2008-0001 Moderate OpenPegasus PAM Authentication Buffer Overflow and updated service console packages  View
280884 55262 CVE-2007-3108 http://openssl.org/news/patch-CVE-2007-3108.txt  View
280885 55262 CVE-2007-3108 oval:org.mitre.oval:def:9984  View
280886 55262 CVE-2007-3108 GLSA-200710-06  View
280887 55262 CVE-2007-3108 http://support.attachmate.com/techdocs/2374.html  View
280888 55262 CVE-2007-3108 http://support.avaya.com/elmodocs2/security/ASA-2007-485.htm  View
280889 55262 CVE-2007-3108 http://www.bluecoat.com/support/securityadvisories/advisory_openssl_rsa_key_reconstruction_vulnerability  View
280890 55262 CVE-2007-3108 DSA-1571  View
280891 55262 CVE-2007-3108 GLSA-200805-07  View
280892 55262 CVE-2007-3108 VU#724968  View
280893 55262 CVE-2007-3108 http://www.kb.cert.org/vuls/id/RGII-74KLP3  View
280894 55262 CVE-2007-3108 MDKSA-2007:193  View
280895 55262 CVE-2007-3108 RHSA-2007:0813  View
280896 55262 CVE-2007-3108 RHSA-2007:0964  View
280897 55262 CVE-2007-3108 RHSA-2007:1003  View
280898 55262 CVE-2007-3108 20070813 FLEA-2007-0043-1 openssl  View
280899 55262 CVE-2007-3108 20080108 VMSA-2008-0001 Moderate OpenPegasus PAM Authentication Buffer Overflow and updated service console packages  View
280900 55262 CVE-2007-3108 20080123 UPDATED VMSA-2008-0001.1 Moderate OpenPegasus PAM Authentication Buffer Overflow and updated service console packages  View
280901 55262 CVE-2007-3108 25163  View
280902 55262 CVE-2007-3108 USN-522-1  View
280903 55262 CVE-2007-3108 http://www.vmware.com/security/advisories/VMSA-2008-0001.html  View
280904 55262 CVE-2007-3108 http://www.vmware.com/security/advisories/VMSA-2008-0013.html  View
280905 55262 CVE-2007-3108 ADV-2007-2759  View
280906 55262 CVE-2007-3108 ADV-2007-4010  View
280907 55262 CVE-2007-3108 ADV-2008-0064  View
280908 55262 CVE-2007-3108 ADV-2008-2361  View
280909 55262 CVE-2007-3108 ADV-2008-2362  View
280910 55262 CVE-2007-3108 ADV-2008-2396  View
280911 55262 CVE-2007-3108 https://issues.rpath.com/browse/RPL-1613  View
280912 55262 CVE-2007-3108 https://issues.rpath.com/browse/RPL-1633  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51952 JVNDB-2007-000615 RSA key reconstruction vulnerability RSA のいくつかの実装に対して秘密鍵を解読できる可能性のある手法が報告されています。この手法は OpenSSL に対して適用され、有効であることがあわせて報告されています。 CVE-2007-3108 26463 CVE-2007-3108 55262 1.2 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000615.html 2007-08-16 2010-05-14 View