Lucene search

K
ubuntucveUbuntu.comUB:CVE-2008-7128
HistoryAug 31, 2009 - 12:00 a.m.

CVE-2008-7128

2009-08-3100:00:00
ubuntu.com
ubuntu.com
11

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.005

Percentile

76.9%

The ssl_parse_client_key_exchange function in XySSL before 0.9 does not
protect against certain Bleichenbacher attacks using chosen ciphertext,
which allows remote attackers to recover keys via unspecified vectors.

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.005

Percentile

76.9%

Related for UB:CVE-2008-7128