Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2011-3389
HistorySep 06, 2011 - 7:55 p.m.

Session fixation

2011-09-0619:55:00
PRIOn knowledge base
www.prio-n.com
16

AI Score

8.7

Confidence

High

EPSS

0.009

Percentile

82.3%

JSON

The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initialization vectors, which allows man-in-the-middle attackers to obtain plaintext HTTP headers via a blockwise chosen-boundary attack (BCBA) on an HTTPS session, in conjunction with JavaScript code that uses (1) the HTML5 WebSocket API, (2) the Java URLConnection API, or (3) the Silverlight WebClient API, aka a “BEAST” attack.

References

Related

openvas 77
nessus 43
debiancve 1
veracode 2
fedora 25
mskb 1
checkpoint_advisories 2
ibm 9
ics 2
nvd 2
cve 2
seebug 2
securityvulns 11
osv 4
checkpoint_security 1
cert 1
ubuntucve 1
debian 5
freebsd 2
cvelist 1
rubygems 1
f5 2
rapid7blog 1
gentoo 1
openvas
openvas
Fedora Update for thunderbird FEDORA-2011-17399
2012-01-23 00:00:00
FreeBSD Ports: fetchmail
2012-08-30 00:00:00
Microsoft Windows SSL/TLS Information Disclosure Vulnerability (2643584)
2012-01-11 00:00:00
nessus
nessus
MS12-006: Vulnerability in SSL/TLS Could Allow Information Disclosure (2643584)
2012-01-10 00:00:00
Oracle Fusion Middleware Security Service Information Disclosure (January 2015 CPU) (BEAST)
2015-01-27 00:00:00
Deprecated
2011-09-29 00:00:00
debiancve
debiancve
CVE-2011-3389
2011-09-06 19:55:03
veracode
veracode
Man-in-the-Middle (MitM)
2019-05-02 04:55:58
Blockwise Chosen-boundary Attacks
2017-04-27 06:38:37
fedora
fedora
[SECURITY] Fedora 16 Update: thunderbird-9.0-4.fc16
2011-12-23 03:31:27
[SECURITY] Fedora 16 Update: nss-softokn-3.13.1-14.fc16
2011-12-23 03:31:27
[SECURITY] Fedora 16 Update: xulrunner-9.0-2.fc16
2011-12-23 03:31:27
mskb
mskb
MS12-006: Vulnerability in SSL/TLS could allow information disclosure: January 10, 2012
2012-01-10 00:00:00
checkpoint_advisories
checkpoint_advisories
Preemptive Protection against SSL and TLS Protocols Information Disclosure (MS12-006; CVE-2011-3389)
2012-01-10 00:00:00
Web Servers SSL Flooding Denial of Service (CVE-2011-3389)
2011-11-06 00:00:00
ibm
ibm
Security Bulletin: Vulnerabilities in SSL and TLS protocols affects SAN Volume Controller and Storwize Family (CVE-2011-3389)
2023-03-29 01:48:02
Security Bulletin: Vulnerabilities in SSL and TLS protocols affects SAN Volume Controller and Storwize Family (CVE-2011-3389)
2022-08-20 00:54:31
Security Bulletin: Vulnerability in Transport Layer Security Protocol Used in IBM System Networking Ethernet Switches (CVE-2011-3389)
2022-09-26 22:21:32
ics
ics
Siemens Ruggedcom WIN Products BEAST Attack Vulnerability
2018-09-06 12:00:00
Siemens SIMATIC RF6XXR
2019-07-11 12:00:00
nvd
nvd
CVE-2011-3389
2011-09-06 19:55:03
CVE-2004-2770
2011-09-25 10:55:04
cve
cve
CVE-2011-3389
2011-09-06 19:55:03
CVE-2004-2770
2011-09-25 10:55:04
seebug
seebug
Microsoft Windows SSL/TLS信息泄露漏洞
2011-09-29 00:00:00
Apple XCode 4.x 信息泄露漏洞
2012-07-27 00:00:00
securityvulns
securityvulns
ESA-2012-032: RSA BSAFE® Micro Edition Suite Security Update for BEAST (Browser Exploit Against SSL/TLS) attacks
2014-05-05 00:00:00
ESA-2012-032: RSA BSAFE(r) Micro Edition Suite Security Update for BEAST (Browser Exploit Against SSL/TLS) attacks
2012-10-29 00:00:00
lighthttpd security vulnerabilities
2012-01-02 00:00:00
osv
osv
CGA-m3vx-v2q7-5ghm
2024-06-06 12:28:22
lighttpd - several
2011-12-20 00:00:00
nss - security update
2015-02-16 00:00:00
checkpoint_security
checkpoint_security
Check Point response to CVE-2011-3389 aka BEAST attack
2012-10-15 22:00:00
cert
cert
SSL 3.0 and TLS 1.0 allow chosen plaintext attack in CBC modes
2011-09-27 00:00:00
ubuntucve
ubuntucve
CVE-2011-3389
2011-11-16 00:00:00
debian
debian
[SECURITY] [DSA 2398-2] curl regression
2012-03-31 19:38:57
[SECURITY] [DSA 2398-1] curl security update
2012-01-30 19:49:07
[SECURITY] [DSA 2381-] lighttpd security update
2011-12-21 00:02:46
freebsd
freebsd
fetchmail -- chosen plaintext attack against SSL CBC initialization vectors
2012-01-19 00:00:00
asterisk -- Multiple vulnerabilities
2016-02-03 00:00:00
cvelist
cvelist
CVE-2011-3389
2011-09-06 19:00:00
rubygems
rubygems
CVE-2011-3389 HTTPS: block-wise chosen-plaintext attack against SSL/TLS (BEAST)
2011-08-31 00:00:00
f5
f5
K13400 : SSL 3.0/TLS 1.0 vulnerability CVE-2011-3389 and TLS protocol vulnerability CVE-2012-1870
2015-06-16 00:00:00
SOL13400 - SSL 3.0/TLS 1.0 BEAST vulnerability CVE-2011-3389 and TLS protocol vulnerability CVE-2012-1870
2012-03-06 00:00:00
rapid7blog
rapid7blog
New Rapid7 MDR Essentials Capability Sees What Attackers See: “It’s Eye-Opening”
2021-09-01 13:11:33
gentoo
gentoo
cURL: Multiple vulnerabilities
2012-03-06 00:00:00

AI Score

8.7

Confidence

High

EPSS

0.009

Percentile

82.3%

JSON
Related for PRION:CVE-2011-3389
openvas77nessus43debiancve1veracode2fedora25mskb1checkpoint_advisories2ibm9ics2nvd2cve2seebug2securityvulns11osv4checkpoint_security1cert1ubuntucve1debian5freebsd2cvelist1rubygems1f52rapid7blog1gentoo1