NVD

Id
9889  
Name
CVE-2011-3207  
Description
crypto/x509/x509_vfy.c in OpenSSL 1.0.x before 1.0.0e does not initialize certain structure members, which makes it easier for remote attackers to bypass CRL validation by using a nextUpdate value corresponding to a time in the past.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2011-09-22  
Modified Date
2014-03-26  
Seq
2011-3207  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
56784 9889 CVE-2011-3207 http://cvs.openssl.org/chngview?cn=21349  View
56785 9889 CVE-2011-3207 APPLE-SA-2013-06-04-1  View
56786 9889 CVE-2011-3207 FEDORA-2011-12281  View
56787 9889 CVE-2011-3207 FEDORA-2011-12233  View
56788 9889 CVE-2011-3207 FEDORA-2012-18035  View
56789 9889 CVE-2011-3207 HPSBMU02752  View
56790 9889 CVE-2011-3207 http://openssl.org/news/secadv_20110906.txt  View
56791 9889 CVE-2011-3207 http://support.apple.com/kb/HT5784  View
56792 9889 CVE-2011-3207 http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564  View
56793 9889 CVE-2011-3207 MDVSA-2011:137  View
56794 9889 CVE-2011-3207 RHSA-2011:1409  View
56795 9889 CVE-2011-3207 1026012  View
56796 9889 CVE-2011-3207 https://bugzilla.redhat.com/show_bug.cgi?id=736087  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
32018 JVNDB-2011-002258 OpenSSL の crypto/x509/x509_vfy.c における CRL 確認を回避される脆弱性 OpenSSL の crypto/x509/x509_vfy.c は、構造体メンバを適切に初期化しないため、容易に CRL 確認を回避される脆弱性が存在します。 CVE-2011-3207 51114 CVE-2011-3207 9889 5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002258.html 2011-09-06 2013-06-07 View