Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2011-3389HistorySep 06, 2011 - 7:55 p.m.
CVE-2011-3389
2011-09-0619:55:03
Debian Security Bug Tracker
security-tracker.debian.org
58
ssl
cbc mode encryption
microsoft
windows
internet explorer
mozilla firefox
google chrome
opera
https
javascript
html5 websocket api
java urlconnection api
silverlight webclient api
beast attack
plaintext http headers
EPSS
0.006
Percentile
78.8%
The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initialization vectors, which allows man-in-the-middle attackers to obtain plaintext HTTP headers via a blockwise chosen-boundary attack (BCBA) on an HTTPS session, in conjunction with JavaScript code that uses (1) the HTML5 WebSocket API, (2) the Java URLConnection API, or (3) the Silverlight WebClient API, aka a “BEAST” attack.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 11 | all | asterisk | < 1:13.7.2~dfsg-1 | asterisk_1:13.7.2~dfsg-1_all.deb |
| Debian | 999 | all | asterisk | < 1:13.7.2~dfsg-1 | asterisk_1:13.7.2~dfsg-1_all.deb |
| Debian | 12 | all | bouncycastle | < 1.49+dfsg-1 | bouncycastle_1.49+dfsg-1_all.deb |
| Debian | 11 | all | bouncycastle | < 1.49+dfsg-1 | bouncycastle_1.49+dfsg-1_all.deb |
| Debian | 999 | all | bouncycastle | < 1.49+dfsg-1 | bouncycastle_1.49+dfsg-1_all.deb |
| Debian | 13 | all | bouncycastle | < 1.49+dfsg-1 | bouncycastle_1.49+dfsg-1_all.deb |
| Debian | 12 | all | curl | < 7.24.0-1 | curl_7.24.0-1_all.deb |
| Debian | 11 | all | curl | < 7.24.0-1 | curl_7.24.0-1_all.deb |
| Debian | 999 | all | curl | < 7.24.0-1 | curl_7.24.0-1_all.deb |
| Debian | 13 | all | curl | < 7.24.0-1 | curl_7.24.0-1_all.deb |
Related
ibm
ibm
ics
ics
Siemens Ruggedcom WIN Products BEAST Attack Vulnerability
2018-09-06 12:00:00
Siemens SIMATIC RF6XXR
2019-07-11 12:00:00
nessus
nessus
openSUSE Security Update : mozilla-nss (openSUSE-2011-100) (BEAST)
2014-06-13 00:00:00
Deprecated
2011-09-29 00:00:00
Solaris 10 (x86) : 125359-15 (BEAST)
2018-03-12 00:00:00
checkpoint_advisories
checkpoint_advisories
nvd
nvd
CVE-2011-3389
2011-09-06 19:55:03
CVE-2004-2770
2011-09-25 10:55:04
seebug
seebug
Microsoft Windows SSL/TLS信息泄露漏洞
2011-09-29 00:00:00
Apple XCode 4.x 信息泄露漏洞
2012-07-27 00:00:00
openvas
openvas
Fedora Update for xulrunner FEDORA-2011-17400
2012-04-02 00:00:00
Fedora Update for nss FEDORA-2011-17400
2012-03-19 00:00:00
Fedora Update for xulrunner FEDORA-2011-17400
2012-04-02 00:00:00
cve
cve
CVE-2011-3389
2011-09-06 19:55:03
CVE-2004-2770
2011-09-25 10:55:04
securityvulns
securityvulns
ESA-2012-032: RSA BSAFE® Micro Edition Suite Security Update for BEAST (Browser Exploit Against SSL/TLS) attacks
2014-05-05 00:00:00
ESA-2012-032: RSA BSAFE(r) Micro Edition Suite Security Update for BEAST (Browser Exploit Against SSL/TLS) attacks
2012-10-29 00:00:00
[SECURITY] [DSA 2368-1] lighttpd security update
2011-12-26 00:00:00
fedora
fedora
[SECURITY] Fedora 15 Update: thunderbird-lightning-1.1-0.1.rc1.fc15
2012-01-22 05:26:28
[SECURITY] Fedora 16 Update: nss-3.13.1-9.fc16
2011-12-23 03:31:27
[SECURITY] Fedora 16 Update: xulrunner-9.0-2.fc16
2011-12-23 03:31:27
veracode
veracode
Man-in-the-Middle (MitM)
2019-05-02 04:55:58
Blockwise Chosen-boundary Attacks
2017-04-27 06:38:37
mskb
mskb
prion
prion
Session fixation
2011-09-06 19:55:00
osv
osv
CGA-m3vx-v2q7-5ghm
2024-06-06 12:28:22
nss - security update
2015-02-16 00:00:00
curl - several
2012-03-31 00:00:00
cert
cert
SSL 3.0 and TLS 1.0 allow chosen plaintext attack in CBC modes
2011-09-27 00:00:00
checkpoint_security
checkpoint_security
Check Point response to CVE-2011-3389 aka BEAST attack
2012-10-15 22:00:00
debian
debian
[SECURITY] [DSA 2398-2] curl regression
2012-03-31 19:38:57
[SECURITY] [DSA 2381-] lighttpd security update
2011-12-21 00:02:46
[SECURITY] [DSA 2368-1] lighttpd security update
2011-12-21 00:24:51
ubuntucve
ubuntucve
CVE-2011-3389
2011-11-16 00:00:00
cvelist
cvelist
CVE-2011-3389
2011-09-06 19:00:00
freebsd
freebsd
fetchmail -- chosen plaintext attack against SSL CBC initialization vectors
2012-01-19 00:00:00
asterisk -- Multiple vulnerabilities
2016-02-03 00:00:00
rubygems
rubygems
f5
f5
rapid7blog
rapid7blog