Lucene search
RubySecRUBY:RUBY-2011-3389-74829HistoryAug 31, 2011 - 12:00 a.m.
CVE-2011-3389 HTTPS: block-wise chosen-plaintext attack against SSL/TLS (BEAST)
2011-08-3100:00:00
RubySec
rubysec.com
26
The SSL protocol, as used in certain configurations in Microsoft
Windows and Microsoft Internet Explorer, Mozilla Firefox, Google
Chrome, Opera, and other products, encrypts data by using CBC mode
with chained initialization vectors, which allows man-in-the-middle
attackers to obtain plaintext HTTP headers via a blockwise
chosen-boundary attack (BCBA) on an HTTPS session, in conjunction
with JavaScript code that uses
(1) the HTML5 WebSocket API,
(2) the Java URLConnection API, or
(3) the Silverlight WebClient API, aka a “BEAST” attack.
References
Related
fedora
fedora
[SECURITY] Fedora 15 Update: nss-util-3.13.1-3.fc15
2012-01-22 05:26:28
[SECURITY] Fedora 15 Update: xulrunner-9.0.1-1.fc15
2012-01-22 05:26:29
[SECURITY] Fedora 15 Update: thunderbird-9.0-4.fc15
2012-01-22 05:26:29
checkpoint_security
checkpoint_security
Check Point response to CVE-2011-3389 aka BEAST attack
2012-10-15 22:00:00
openvas
openvas
Fedora Update for thunderbird-lightning FEDORA-2011-17399
2012-01-23 00:00:00
Fedora Update for firefox FEDORA-2011-17399
2012-01-23 00:00:00
Fedora Update for thunderbird-lightning FEDORA-2011-17400
2012-04-02 00:00:00
ibm
ibm
nessus
nessus
Kerio Connect < 8.1.0 SSL/TLS Information Disclosure (BEAST)
2014-02-07 00:00:00
SSL/TLS Protocol Initialization Vector Implementation Information Disclosure Vulnerability (BEAST)
2012-04-16 00:00:00
Solaris 10 (x86) : 125359-15 (BEAST)
2018-03-12 00:00:00
cert
cert
SSL 3.0 and TLS 1.0 allow chosen plaintext attack in CBC modes
2011-09-27 00:00:00
checkpoint_advisories
checkpoint_advisories
securityvulns
securityvulns
ESA-2012-032: RSA BSAFE® Micro Edition Suite Security Update for BEAST (Browser Exploit Against SSL/TLS) attacks
2014-05-05 00:00:00
ESA-2012-032: RSA BSAFE(r) Micro Edition Suite Security Update for BEAST (Browser Exploit Against SSL/TLS) attacks
2012-10-29 00:00:00
lighthttpd security vulnerabilities
2012-01-02 00:00:00
seebug
seebug
Microsoft Windows SSL/TLS信息泄露漏洞
2011-09-29 00:00:00
Apple XCode 4.x 信息泄露漏洞
2012-07-27 00:00:00
cve
cve
CVE-2011-3389
2011-09-06 19:55:00
CVE-2004-2770
2011-09-25 10:55:00
ics
ics
Siemens Ruggedcom WIN Products BEAST Attack Vulnerability
2018-09-06 12:00:00
Siemens SIMATIC RF6XXR
2019-07-11 12:00:00
prion
prion
Session fixation
2011-09-06 19:55:00
veracode
veracode
Man-in-the-Middle (MitM)
2019-05-02 04:55:58
Blockwise Chosen-boundary Attacks
2017-04-27 06:38:37
mskb
mskb
debiancve
debiancve
CVE-2011-3389
2011-09-06 19:55:00
debian
debian
[SECURITY] [DSA 2398-2] curl regression
2012-03-31 19:38:57
[SECURITY] [DSA 2368-1] lighttpd security update
2011-12-21 00:24:51
[SECURITY] [DSA 2381-] lighttpd security update
2011-12-21 00:02:46
freebsd
freebsd
fetchmail -- chosen plaintext attack against SSL CBC initialization vectors
2012-01-19 00:00:00
asterisk -- Multiple vulnerabilities
2016-02-03 00:00:00
ubuntucve
ubuntucve
CVE-2011-3389
2011-11-16 00:00:00
osv
osv
curl - several
2012-03-31 00:00:00
nss - security update
2015-02-16 00:00:00
lighttpd - several
2011-12-20 00:00:00
f5
f5
rapid7blog
rapid7blog
Related for RUBY:RUBY-2011-3389-74829