CVE-2014-4193

CVE-2014-4193 concerns the TLS implementation in EMC RSA BSAFE-Java Toolkits (Share for Java) . The vulnerability arises from the TLS stack using the Extended Random extension while Dual_EC_DRBG is in use, which can allow an observer to recover enough state to obtain plaintext from TLS sessions b...

CVE-2014-4193: Undefined Security Weakness

The TLS implementation in EMC RSA BSAFE-Java Toolkits aka Share for Java supports the Extended Random extension during use of the DualECDRBG algorithm, which makes it easier for remote attackers to obtain plaintext from TLS sessions by requesting long nonces from a server, a different issue than...

PT-2014-5727

Name of the Vulnerable Software and Affected Versions EMC RSA BSAFE-Java Toolkits aka Share for Java affected versions not specified Description The issue concerns the TLS implementation in the affected software, specifically its support for the Extended Random extension when using the Dual EC DR...