Home > Vulnerability Database > CVE-2011-4576

Mend.io Vulnerability Database

CVE-2011-4576

Date: January 5, 2012

The SSL 3.0 implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly initialize data structures for block cipher padding, which might allow remote attackers to obtain sensitive information by decrypting the padding data sent by an SSL peer.

Language: C

Severity Score

5.3

Related Resources (27)

Url: http://marc.info/?l=bugtraq&m=134039053214295&w=2

Url: http://secunia.com/advisories/57353

Url: http://rhn.redhat.com/errata/RHSA-2012-1307.html

Url: http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00018.html

Url: http://rhn.redhat.com/errata/RHSA-2012-1308.html

Url: http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092905.html

Url: http://aix.software.ibm.com/aix/efixes/security/openssl_advisory3.asc

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2011-4576

Url: http://www.openssl.org/news/secadv_20120104.txt

Url: http://secunia.com/advisories/55069

Url: http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html

Url: http://support.apple.com/kb/HT5784

Url: http://marc.info/?l=bugtraq&m=133951357207000&w=2

Url: http://www.mandriva.com/security/advisories?name=MDVSA-2012:007

Url: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041

Url: http://www.kb.cert.org/vuls/id/737740

Url: http://secunia.com/advisories/48528

Url: http://www.mandriva.com/security/advisories?name=MDVSA-2012:006

Url: http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564

Url: https://nvd.nist.gov/vuln/detail/CVE-2011-4576

Url: http://marc.info/?l=bugtraq&m=132750648501816&w=2

Url: https://security-tracker.debian.org/tracker/CVE-2011-4576

Url: https://access.redhat.com/security/cve/CVE-2011-4576

Url: http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00017.html

Url: http://www.debian.org/security/2012/dsa-2390

Url: http://rhn.redhat.com/errata/RHSA-2012-1306.html

Url: https://www.mend.io/vulnerability-database/CVE-2011-4576

Severity Score

5.3

Weakness Type (CWE)

Cryptographic Issues

CWE-310

CVSS v3.1

Base Score:	5.3
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	LOW
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	LOW
Integrity (I):	NONE
Availability (A):	NONE

CVSS v2

Base Score:	5.0
Access Vector (AV):	NETWORK
Access Complexity (AC):	LOW
Authentication (AU):	NONE
Confidentiality (C):	PARTIAL
Integrity (I):	NONE
Availability (A):	NONE
Additional information:

Mend.io Vulnerability Database

We found results for “”

CVE-2011-4576

Date: January 5, 2012

Language: C

Severity Score

Related Resources (27)

Severity Score

Weakness Type (CWE)

CVSS v3.1

CVSS v2

Do you need more information?