CVE-2011-3389

CVE-2011-3389

Published · Updated

40Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 73%
from disclosure to weapon1134 days
Published on NVDSep 6
metasploit+1134d
exploitation probability
73%top 1% of all CVEs
observed exploitation
nono source reports it
What the vendors declare (VEX)

Official vendor statements in CSAF/VEX format: whether their product is affected, already fixed, or ruled out — and why. These are the vendor's assertions, not Vexday's judgment.

Red HatVEX document ↗
Affected
3 products (28 components)
Red Hat Enterprise Linux 6 · Red Hat Enterprise Linux 4 · Red Hat Enterprise Linux 5
no_fix_planned: Will not fix
Fixed
18 products (610 components)
Red Hat Enterprise Linux Server Supplementary (v. 5) · Red Hat Enterprise Linux AS version 4 Extras · Red Hat Enterprise Linux Server Supplementary (v. 6) · Red Hat Enterprise Linux Desktop Supplementary (v. 5) · Red Hat Enterprise Linux ES version 4 Extras · and others 13
fix ↗
The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initialization vectors, which allows man-in-the-middle attackers to obtain plaintext HTTP headers via a blockwise chosen-boundary attack (BCBA) on an HTTPS session, in conjunction with JavaScript code that uses (1) the HTML5 WebSocket API, (2) the Java URLConnection API, or (3) the Silverlight WebClient API, aka a "BEAST" attack.
Affected products
n/a · n/a
References
http://blog.mozilla.com/security/2011/09/27/attack-against-tls-protected-communications/http://blogs.technet.com/b/msrc/archive/2011/09/26/microsoft-releases-security-advisory-2588513.aspxhttp://blogs.technet.com/b/srd/archive/2011/09/26/is-ssl-broken-more-about-security-advisory-2588513.aspxhttp://curl.haxx.se/docs/adv_20120124B.htmlhttp://downloads.asterisk.org/pub/security/AST-2016-001.htmlhttp://ekoparty.org/2011/juliano-rizzo.phphttp://eprint.iacr.org/2004/111http://eprint.iacr.org/2006/136http://googlechromereleases.blogspot.com/2011/10/chrome-stable-release.htmlhttp://isc.sans.edu/diary/SSL+TLS+part+3+/11635http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.htmlhttp://lists.apple.com/archives/Security-announce/2011//Oct/msg00002.html