Lucene search
Ubuntu.comUB:CVE-2010-4252HistoryDec 06, 2010 - 12:00 a.m.
CVE-2010-4252
2010-12-0600:00:00
ubuntu.com
ubuntu.com
31
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.03 Low
EPSS
Percentile
90.8%
OpenSSL before 1.0.0c, when J-PAKE is enabled, does not properly validate
the public parameters in the J-PAKE protocol, which allows remote attackers
to bypass the need for knowledge of the shared secret, and successfully
authenticate, by sending crafted values in each round of the protocol.
Notes
| Author | Note |
|---|---|
| jdstrand | Ubuntu 10.04 LTS and later have J-PAKE code, but openssl is compiled with OPENSSL_NO_JPAKE |
Related
openssl
openssl
Vulnerability in OpenSSL CVE-2010-4252
2010-12-02 00:00:00
openvas
openvas
OpenSSL: JPAKE validation error (20101202) - Windows
2021-08-16 00:00:00
F5 BIG-IP - OpenSSL vulnerability CVE-2010-4252
2015-10-14 00:00:00
OpenSSL: JPAKE validation error (20101202) - Linux
2021-08-16 00:00:00
cve
cve
CVE-2010-4252
2010-12-06 21:05:00
CVE-2010-4478
2010-12-06 22:30:00
debiancve
debiancve
CVE-2010-4252
2010-12-06 21:05:00
CVE-2010-4478
2010-12-06 22:30:00
f5
f5
K17382 : OpenSSL vulnerability CVE-2010-4252
2015-10-09 00:00:00
SOL17382 - OpenSSL vulnerability CVE-2010-4252
2015-10-09 00:00:00
nessus
nessus
F5 Networks BIG-IP : OpenSSL vulnerability (K17382)
2015-10-12 00:00:00
Slackware 11.0 / 12.0 / 12.1 / 12.2 / 13.0 / 13.1 / current : openssl (SSA:2010-340-01)
2010-12-08 00:00:00
OpenSSL < 0.9.8q / 1.0.0c Multiple Vulnerabilities
2010-12-07 00:00:00
prion
prion
Design/Logic Flaw
2010-12-06 21:05:00
Design/Logic Flaw
2010-12-06 22:30:00
slackware
slackware
[slackware-security] openssl
2010-12-07 07:14:58
ubuntucve
ubuntucve
CVE-2010-4478
2010-12-06 00:00:00
attackerkb
attackerkb
CVE-2010-4478
2010-12-06 00:00:00
securityvulns
securityvulns
OpenSSL protection level downgrade
2010-12-09 00:00:00
gentoo
gentoo
OpenSSL: Multiple vulnerabilities
2011-10-09 00:00:00
ibm
ibm
vmware
vmware
VMware vSphere and vCOps updates to third party libraries
2012-08-30 00:00:00
VMware vSphere and vCOps updates to third party libraries
2012-08-30 00:00:00
lenovo
lenovo
Intel® PROSet/Wireless WiFi Software Vulnerabilities - Lenovo Support US
2018-11-13 17:10:51
Intel® PROSet/Wireless WiFi Software Vulnerabilities - US
2018-11-13 17:10:51
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.03 Low
EPSS
Percentile
90.8%
Related for UB:CVE-2010-4252