CVE-2011-1923

The Diffie-Hellman key-exchange implementation in dhm.c in PolarSSL before 0.14.2 does not properly validate a public parameter, which makes it easier for man-in-the-middle attackers to obtain the shared secret key by modifying network traffic, a related issue to CVE-2011-5095.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4 UNKNOWN
NETWORK
HIGH
AV:N/AC:H/Au:N/C:P/I:P/A:N
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 49%
VendorProductVersion
polarsslpolarssl
𝑥
≤ 0.14.0
polarsslpolarssl
0.10.0
polarsslpolarssl
0.10.1
polarsslpolarssl
0.11.0
polarsslpolarssl
0.11.1
polarsslpolarssl
0.12.0
polarsslpolarssl
0.12.1
polarsslpolarssl
0.13.1
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
polarssl
saucy
not-affected
raring
not-affected
quantal
not-affected
precise
not-affected
oneiric
not-affected
natty
ignored
maverick
ignored
lucid
ignored
hardy
dne
Common Weakness Enumeration
References
http://polarssl.org/trac/wiki/SecurityAdvisory201101
http://www.cl.cam.ac.uk/~rja14/Papers/psandqs.pdf
http://www.nessus.org/plugins/index.php?view=single&id=53360
http://www.securityfocus.com/bid/46670
http://polarssl.org/trac/wiki/SecurityAdvisory201101
http://www.cl.cam.ac.uk/~rja14/Papers/psandqs.pdf
http://www.nessus.org/plugins/index.php?view=single&id=53360
http://www.securityfocus.com/bid/46670