CVE-2011-1923

The Diffie-Hellman key-exchange implementation in dhm.c in PolarSSL before 0.14.2 does not properly validate a public parameter, which makes it easier for man-in-the-middle attackers to obtain the shared secret key by modifying network traffic, a related issue to CVE-2011-5095...

Design/Logic Flaw

The Diffie-Hellman key-exchange implementation in dhm.c in PolarSSL before 0.14.2 does not properly validate a public parameter, which makes it easier for man-in-the-middle attackers to obtain the shared secret key by modifying network traffic, a related issue to CVE-2011-5095...

CVE-2011-1923

Technical details about CVE-2011-1923 (PolarSSL DH parameter validation flaw) are not present in the provided connected documents. Please monitor for updates; current sources reference related CVE-2011-5095 but do not disclose product/impact specifics here.

CVE-2011-1923

The Diffie-Hellman key-exchange implementation in dhm.c in PolarSSL before 0.14.2 does not properly validate a public parameter, which makes it easier for man-in-the-middle attackers to obtain the shared secret key by modifying network traffic, a related issue to CVE-2011-5095...

[SECURITY] Fedora 17 Update: polarssl-1.1.3-1.fc17

PolarSSL is a light-weight open source cryptographic and SSL/TLS library written in C. PolarSSL makes it easy for developers to include cryptographic and SSL/TLS capabilities in their embedded applications with as little hassle as possible...

Fedora 17 : polarssl-1.1.3-1.fc17 (2012-6963)

A security and bugfix release to PolarSSL http://polarssl.org/news http://polarssl.org/trac/wiki/SecurityAdvisory201201 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...