Direct naar de inhoud
⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →
cybernieuws.nl Cybersecurity en informatiebeveiling nieuws alerts live · 11 min 169 bronnen
CVE's Videos Dagbriefing

← Terug naar CVE-database

CVE-2011-3389

MEDIUM · 4.3 CVSS Gepubliceerd: CWE-326

Beschrijving NL

The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initialization vectors, which allows man-in-the-middle attackers to obtain plaintext HTTP headers via a blockwise chosen-boundary attack (BCBA) on an HTTPS session, in conjunction with JavaScript code that uses (1) the HTML5 WebSocket API, (2) the Java URLConnection API , or (3) the Silverlight WebClient API, aka a "BEAST" attack.

Origineel (Engels) tonen

The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initialization vectors, which allows man-in-the-middle attackers to obtain plaintext HTTP headers via a blockwise chosen-boundary attack (BCBA) on an HTTPS session, in conjunction with JavaScript code that uses (1) the HTML5 WebSocket API, (2) the Java URLConnection API, or (3) the Silverlight WebClient API, aka a "BEAST" attack.

Vendors

Google Microsoft Mozilla Opera Siemens Haxx Redhat Debian Canonical

Affected products

Chrome Internet Explorer Firefox Opera Browser Windows Simatic Rf68xr Firmware Simatic Rf68xr Simatic Rf615r Firmware Simatic Rf615r Curl Enterprise Linux Desktop Enterprise Linux Eus Enterprise Linux Server Enterprise Linux Server Aus Enterprise Linux Workstation Debian Linux Ubuntu Linux

References