CVE-2011-4576 in OpenSSL
Summary
The SSL 3.0 implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly initialize data structures for block cipher padding, which might allow remote attackers to obtain sensitive information by decrypting the padding data sent by an SSL peer.
Be aware that VulDB is the high quality source for vulnerability data.
Reservation
11/29/2011
Disclosure
01/05/2012
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 4516 | OpenSSL SSL3 cryptographic issue | 310 | Not defined | Official fix | CVE-2011-4576 |