Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2011-1923
HistoryJun 20, 2012 - 5:55 p.m.

CVE-2011-1923

2012-06-2017:55:01
CWE-310
[email protected]
web.nvd.nist.gov

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:P/A:N

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.8%

JSON

The Diffie-Hellman key-exchange implementation in dhm.c in PolarSSL before 0.14.2 does not properly validate a public parameter, which makes it easier for man-in-the-middle attackers to obtain the shared secret key by modifying network traffic, a related issue to CVE-2011-5095.

Affected configurations

NVD
Node
polarsslpolarsslRange≤0.14.0
OR
polarsslpolarsslMatch0.10.0
OR
polarsslpolarsslMatch0.10.1
OR
polarsslpolarsslMatch0.11.0
OR
polarsslpolarsslMatch0.11.1
OR
polarsslpolarsslMatch0.12.0
OR
polarsslpolarsslMatch0.12.1
OR
polarsslpolarsslMatch0.13.1

Related

cvelist 2
prion 2
nvd 1
ubuntucve 2
cve 2
debiancve 1
nessus 5
openvas 3
gentoo 1
cvelist
cvelist
CVE-2011-1923
2012-06-20 17:00:00
CVE-2011-5095
2022-10-03 16:15:12
prion
prion
Design/Logic Flaw
2012-06-20 17:55:00
Design/Logic Flaw
2012-06-20 17:55:00
nvd
nvd
CVE-2011-5095
2012-06-20 17:55:01
ubuntucve
ubuntucve
CVE-2011-1923
2012-06-20 00:00:00
CVE-2011-5095
2012-06-20 00:00:00
cve
cve
CVE-2011-1923
2012-06-20 17:55:01
CVE-2011-5095
2022-10-03 16:15:12
debiancve
debiancve
CVE-2011-5095
2022-10-03 16:15:12
nessus
nessus
SuSE 11.1 Security Update : libopenssl (SAT Patch Number 6521)
2013-01-25 00:00:00
SSL Server Accepts Weak Diffie-Hellman Keys
2011-04-11 00:00:00
RHEL 5 : openssl097a (Unpatched Vulnerability)
2024-06-03 00:00:00
openvas
openvas
OpenSSL 0.9.8 Information Disclosure Vulnerability
2020-11-06 00:00:00
SUSE: Security Advisory (SUSE-SU-2012:0885-1)
2021-06-09 00:00:00
Gentoo Security Advisory GLSA 201310-10
2015-09-29 00:00:00
gentoo
gentoo
PolarSSL: Multiple vulnerabilities
2013-10-17 00:00:00

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:P/A:N

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.8%

JSON
Related for NVD:CVE-2011-1923
cvelist2prion2nvd1ubuntucve2cve2debiancve1nessus5openvas3gentoo1