NetSight
IP …
medium5.0

CVE-2011-4576

The SSL 3.0 implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly initialize data structures for block cipher padding, which might al…

Impact

The SSL 3.0 implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly initialize data structures for block cipher padding, which might allow remote attackers to obtain sensitive information by decrypting the padding data sent by an SSL peer.

Affected products

VendorProductAffected versions
OpensslOpenssl
through 0.9.8r
Versions 0.9.1c, 0.9.2b, 0.9.4, 0.9.5, 0.9.5a

Weakness classification

CWE-310

References