Lucene search
RootSSV:20957HistorySep 29, 2011 - 12:00 a.m.
Microsoft Windows SSL/TLS信息泄露漏洞
2011-09-2900:00:00
Root
www.seebug.org
55
0.003 Low
EPSS
Percentile
66.1%
CVE ID: CVE-2011-3389
Microsoft Windows是微软发布的非常流行的操作系统。
Microsoft Windows在SSL/TLS协议的实现上存在信息泄露漏洞，远程攻击者可利用此漏洞泄露敏感信息并劫持用户会话。
此漏洞源于在CBC模式中结合对称密码套件使用Secure Sockets Layer 3.0 (SSL)和Transport Layer Security 1.0 (TLS) 协议时出现的设计错误，通过中间人攻击加密HTTPS会话。
Microsoft Windows
Microsoft Windows XP Home
Microsoft Windows XP Professional
Microsoft Windows Server 2003
厂商补丁：
Microsoft
Microsoft已经为此发布了一个安全公告（2588513）以及相应补丁:
2588513：Microsoft releases Security Advisory 2588513
链接：http://blogs.technet.com/b/msrc/archive/2011/09/26/microsoft-releases-security-advisory-2588513.aspx
Related
checkpoint_advisories
checkpoint_advisories
openvas
openvas
Fedora Update for xulrunner FEDORA-2011-17400
2012-04-02 00:00:00
Fedora Update for xulrunner FEDORA-2011-17400
2012-04-02 00:00:00
Fedora Update for nss FEDORA-2011-17400
2012-03-19 00:00:00
nessus
nessus
Deprecated
2011-09-29 00:00:00
openSUSE Security Update : mozilla-nss (openSUSE-2011-100) (BEAST)
2014-06-13 00:00:00
Kerio Connect < 8.1.0 SSL/TLS Information Disclosure (BEAST)
2014-02-07 00:00:00
cve
cve
CVE-2011-3389
2011-09-06 19:55:00
CVE-2004-2770
2011-09-25 10:55:00
ics
ics
Siemens Ruggedcom WIN Products BEAST Attack Vulnerability
2018-09-06 12:00:00
Siemens SIMATIC RF6XXR
2019-07-11 12:00:00
ibm
ibm
fedora
fedora
[SECURITY] Fedora 15 Update: nss-util-3.13.1-3.fc15
2012-01-22 05:26:28
[SECURITY] Fedora 15 Update: xulrunner-9.0.1-1.fc15
2012-01-22 05:26:29
[SECURITY] Fedora 15 Update: nspr-4.8.9-2.fc15
2012-01-22 05:26:29
checkpoint_security
checkpoint_security
Check Point response to CVE-2011-3389 aka BEAST attack
2012-10-15 22:00:00
cert
cert
SSL 3.0 and TLS 1.0 allow chosen plaintext attack in CBC modes
2011-09-27 00:00:00
securityvulns
securityvulns
ESA-2012-032: RSA BSAFE® Micro Edition Suite Security Update for BEAST (Browser Exploit Against SSL/TLS) attacks
2014-05-05 00:00:00
ESA-2012-032: RSA BSAFE(r) Micro Edition Suite Security Update for BEAST (Browser Exploit Against SSL/TLS) attacks
2012-10-29 00:00:00
ESA-2013-039: RSA BSAFE® SSL-J Multiple Vulnerabilities
2014-04-07 00:00:00
prion
prion
Session fixation
2011-09-06 19:55:00
mskb
mskb
veracode
veracode
Man-in-the-Middle (MitM)
2019-05-02 04:55:58
Blockwise Chosen-boundary Attacks
2017-04-27 06:38:37
debiancve
debiancve
CVE-2011-3389
2011-09-06 19:55:00
debian
debian
[SECURITY] [DSA 2398-2] curl regression
2012-03-31 19:38:57
[SECURITY] [DSA 2381-] lighttpd security update
2011-12-21 00:02:46
[SECURITY] [DSA 2368-1] lighttpd security update
2011-12-21 00:24:51
ubuntucve
ubuntucve
CVE-2011-3389
2011-11-16 00:00:00
freebsd
freebsd
fetchmail -- chosen plaintext attack against SSL CBC initialization vectors
2012-01-19 00:00:00
asterisk -- Multiple vulnerabilities
2016-02-03 00:00:00
opera -- multiple vulnerabilities
2011-12-06 00:00:00
rubygems
rubygems
osv
osv
nss - security update
2015-02-16 00:00:00
curl - several
2012-03-31 00:00:00
lighttpd - several
2011-12-20 00:00:00
f5
f5
seebug
seebug
Apple XCode 4.x 信息泄露漏洞
2012-07-27 00:00:00
rapid7blog
rapid7blog
gentoo
gentoo
cURL: Multiple vulnerabilities
2012-03-06 00:00:00