CVE-2011-3389

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://www.opera.com/docs/changelogs/unix/1151/", "name": "http://www.opera.com/docs/changelogs/unix/1151/", "tags": [], "refsource": "CONFIRM"}, {"url": "http://www.securityfocus.com/bid/49388", "name": "49388", "tags": [], "refsource": "BID"}, {"url": "http://www.opera.com/docs/changelogs/windows/1151/", "name": "http://www.opera.com/docs/changelogs/windows/1151/", "tags": [], "refsource": "CONFIRM"}, {"url": "http://www.opera.com/docs/changelogs/mac/1151/", "name": "http://www.opera.com/docs/changelogs/mac/1151/", "tags": [], "refsource": "CONFIRM"}, {"url": "http://osvdb.org/74829", "name": "74829", "tags": [], "refsource": "OSVDB"}, {"url": "http://secunia.com/advisories/45791", "name": "45791", "tags": ["Vendor Advisory"], "refsource": "SECUNIA"}, {"url": "http://www.securitytracker.com/id?1025997", "name": "1025997", "tags": [], "refsource": "SECTRACK"}, {"url": "http://eprint.iacr.org/2004/111", "name": "http://eprint.iacr.org/2004/111", "tags": [], "refsource": "MISC"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=737506", "name": "https://bugzilla.redhat.com/show_bug.cgi?id=737506", "tags": [], "refsource": "CONFIRM"}, {"url": "http://ekoparty.org/2011/juliano-rizzo.php", "name": "http://ekoparty.org/2011/juliano-rizzo.php", "tags": [], "refsource": "MISC"}, {"url": "http://www.imperialviolet.org/2011/09/23/chromeandbeast.html", "name": "http://www.imperialviolet.org/2011/09/23/chromeandbeast.html", "tags": [], "refsource": "CONFIRM"}, {"url": "https://bugzilla.novell.com/show_bug.cgi?id=719047", "name": "https://bugzilla.novell.com/show_bug.cgi?id=719047", "tags": [], "refsource": "CONFIRM"}, {"url": "http://www.insecure.cl/Beast-SSL.rar", "name": "http://www.insecure.cl/Beast-SSL.rar", "tags": ["Patch"], "refsource": "MISC"}, {"url": "http://www.educatedguesswork.org/2011/09/security_impact_of_the_rizzodu.html", "name": "http://www.educatedguesswork.org/2011/09/security_impact_of_the_rizzodu.html", "tags": [], "refsource": "MISC"}, {"url": "http://eprint.iacr.org/2006/136", "name": "http://eprint.iacr.org/2006/136", "tags": [], "refsource": "MISC"}, {"url": "http://isc.sans.edu/diary/SSL+TLS+part+3+/11635", "name": "http://isc.sans.edu/diary/SSL+TLS+part+3+/11635", "tags": [], "refsource": "MISC"}, {"url": "http://my.opera.com/securitygroup/blog/2011/09/28/the-beast-ssl-tls-issue", "name": "http://my.opera.com/securitygroup/blog/2011/09/28/the-beast-ssl-tls-issue", "tags": [], "refsource": "CONFIRM"}, {"url": "http://blog.mozilla.com/security/2011/09/27/attack-against-tls-protected-communications/", "name": "http://blog.mozilla.com/security/2011/09/27/attack-against-tls-protected-communications/", "tags": [], "refsource": "CONFIRM"}, {"url": "http://blogs.technet.com/b/msrc/archive/2011/09/26/microsoft-releases-security-advisory-2588513.aspx", "name": "http://blogs.technet.com/b/msrc/archive/2011/09/26/microsoft-releases-security-advisory-2588513.aspx", "tags": [], "refsource": "CONFIRM"}, {"url": "http://technet.microsoft.com/security/advisory/2588513", "name": "http://technet.microsoft.com/security/advisory/2588513", "tags": [], "refsource": "CONFIRM"}, {"url": "http://support.apple.com/kb/HT4999", "name": "http://support.apple.com/kb/HT4999", "tags": [], "refsource": "CONFIRM"}, {"url": "http://www.oracle.com/technetwork/topics/security/javacpuoct2011-443431.html", "name": "http://www.oracle.com/technetwork/topics/security/javacpuoct2011-443431.html", "tags": [], "refsource": "CONFIRM"}, {"url": "http://support.apple.com/kb/HT5001", "name": "http://support.apple.com/kb/HT5001", "tags": [], "refsource": "CONFIRM"}, {"url": "http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html", "name": "APPLE-SA-2011-10-12-1", "tags": [], "refsource": "APPLE"}, {"url": "http://lists.apple.com/archives/Security-announce/2011//Oct/msg00002.html", "name": "APPLE-SA-2011-10-12-2", "tags": [], "refsource": "APPLE"}, {"url": "http://www.securitytracker.com/id?1026103", "name": "1026103", "tags": [], "refsource": "SECTRACK"}, {"url": "http://www.securityfocus.com/bid/49778", "name": "49778", "tags": [], "refsource": "BID"}, {"url": "http://blogs.technet.com/b/srd/archive/2011/09/26/is-ssl-broken-more-about-security-advisory-2588513.aspx", "name": "http://blogs.technet.com/b/srd/archive/2011/09/26/is-ssl-broken-more-about-security-advisory-2588513.aspx", "tags": [], "refsource": "CONFIRM"}, {"url": "http://www.redhat.com/support/errata/RHSA-2011-1384.html", "name": "RHSA-2011:1384", "tags": ["Vendor Advisory"], "refsource": "REDHAT"}, {"url": "http://vnhacker.blogspot.com/2011/09/beast.html", "name": "http://vnhacker.blogspot.com/2011/09/beast.html", "tags": [], "refsource": "MISC"}, {"url": "http://www.kb.cert.org/vuls/id/864643", "name": "VU#864643", "tags": ["US Government Resource"], "refsource": "CERT-VN"}, {"url": "http://googlechromereleases.blogspot.com/2011/10/chrome-stable-release.html", "name": "http://googlechromereleases.blogspot.com/2011/10/chrome-stable-release.html", "tags": [], "refsource": "CONFIRM"}, {"url": "http://www.ibm.com/developerworks/java/jdk/alerts/", "name": "http://www.ibm.com/developerworks/java/jdk/alerts/", "tags": [], "refsource": "CONFIRM"}, {"url": "http://www.opera.com/docs/changelogs/windows/1160/", "name": "http://www.opera.com/docs/changelogs/windows/1160/", "tags": [], "refsource": "CONFIRM"}, {"url": "http://www.opera.com/docs/changelogs/mac/1160/", "name": "http://www.opera.com/docs/changelogs/mac/1160/", "tags": [], "refsource": "CONFIRM"}, {"url": "http://www.opera.com/support/kb/view/1004/", "name": "http://www.opera.com/support/kb/view/1004/", "tags": ["Vendor Advisory"], "refsource": "CONFIRM"}, {"url": "http://www.opera.com/docs/changelogs/unix/1160/", "name": "http://www.opera.com/docs/changelogs/unix/1160/", "tags": [], "refsource": "CONFIRM"}, {"url": "http://www.redhat.com/support/errata/RHSA-2012-0006.html", "name": "RHSA-2012:0006", "tags": [], "refsource": "REDHAT"}, {"url": "http://support.apple.com/kb/HT5130", "name": "http://support.apple.com/kb/HT5130", "tags": [], "refsource": "CONFIRM"}, {"url": "http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html", "name": "APPLE-SA-2012-02-01-1", "tags": [], "refsource": "APPLE"}, {"url": "http://marc.info/?l=bugtraq&m=132872385320240&w=2", "name": "SSRT100740", "tags": [], "refsource": "HP"}, {"url": "http://support.apple.com/kb/HT5281", "name": "http://support.apple.com/kb/HT5281", "tags": [], "refsource": "CONFIRM"}, {"url": "http://lists.apple.com/archives/security-announce/2012/May/msg00001.html", "name": "APPLE-SA-2012-05-09-1", "tags": [], "refsource": "APPLE"}, {"url": "http://lists.apple.com/archives/security-announce/2012/Jul/msg00001.html", "name": "APPLE-SA-2012-07-25-2", "tags": [], "refsource": "APPLE"}, {"url": "http://support.apple.com/kb/HT5501", "name": "http://support.apple.com/kb/HT5501", "tags": [], "refsource": "CONFIRM"}, {"url": "http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html", "name": "APPLE-SA-2012-09-19-2", "tags": [], "refsource": "APPLE"}, {"url": "http://secunia.com/advisories/49198", "name": "49198", "tags": [], "refsource": "SECUNIA"}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00051.html", "name": "SUSE-SU-2012:0122", "tags": [], "refsource": "SUSE"}, {"url": "https://hermes.opensuse.org/messages/13155432", "name": "openSUSE-SU-2012:0063", "tags": [], "refsource": "SUSE"}, {"url": "https://hermes.opensuse.org/messages/13154861", "name": "openSUSE-SU-2012:0030", "tags": [], "refsource": "SUSE"}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00049.html", "name": "SUSE-SU-2012:0114", "tags": [], "refsource": "SUSE"}, {"url": "http://marc.info/?l=bugtraq&m=132750579901589&w=2", "name": "HPSBUX02730", "tags": [], "refsource": "HP"}, {"url": "http://secunia.com/advisories/48692", "name": "48692", "tags": [], "refsource": "SECUNIA"}, {"url": "https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_fetchmail", "name": "https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_fetchmail", "tags": [], "refsource": "CONFIRM"}, {"url": "http://secunia.com/advisories/48948", "name": "48948", "tags": [], "refsource": "SECUNIA"}, {"url": "http://secunia.com/advisories/48915", "name": "48915", "tags": [], "refsource": "SECUNIA"}, {"url": "http://www.us-cert.gov/cas/techalerts/TA12-010A.html", "name": "TA12-010A", "tags": ["US Government Resource"], "refsource": "CERT"}, {"url": "https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03839862", "name": "HPSBMU02900", "tags": [], "refsource": "HP"}, {"url": "http://secunia.com/advisories/55351", "name": "55351", "tags": [], "refsource": "SECUNIA"}, {"url": "http://secunia.com/advisories/55322", "name": "55322", "tags": [], "refsource": "SECUNIA"}, {"url": "http://secunia.com/advisories/55350", "name": "55350", "tags": [], "refsource": "SECUNIA"}, {"url": "http://www.securitytracker.com/id/1029190", "name": "1029190", "tags": [], "refsource": "SECTRACK"}, {"url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html", "name": "RHSA-2013:1455", "tags": [], "refsource": "REDHAT"}, {"url": "http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html", "name": "APPLE-SA-2013-10-22-3", "tags": [], "refsource": "APPLE"}, {"url": "http://www.ubuntu.com/usn/USN-1263-1", "name": "USN-1263-1", "tags": [], "refsource": "UBUNTU"}, {"url": "http://support.apple.com/kb/HT6150", "name": "http://support.apple.com/kb/HT6150", "tags": [], "refsource": "CONFIRM"}, {"url": "http://security.gentoo.org/glsa/glsa-201406-32.xml", "name": "GLSA-201406-32", "tags": [], "refsource": "GENTOO"}, {"url": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html", "name": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html", "tags": [], "refsource": "CONFIRM"}, {"url": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html", "name": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html", "tags": [], "refsource": "CONFIRM"}, {"url": "http://downloads.asterisk.org/pub/security/AST-2016-001.html", "name": "http://downloads.asterisk.org/pub/security/AST-2016-001.html", "tags": [], "refsource": "CONFIRM"}, {"url": "http://marc.info/?l=bugtraq&m=134254957702612&w=2", "name": "SSRT100867", "tags": [], "refsource": "HP"}, {"url": "http://marc.info/?l=bugtraq&m=133365109612558&w=2", "name": "SSRT100805", "tags": [], "refsource": "HP"}, {"url": "http://marc.info/?l=bugtraq&m=133728004526190&w=2", "name": "HPSBUX02777", "tags": [], "refsource": "HP"}, {"url": "http://www.apcmedia.com/salestools/SJHN-7RKGNM/SJHN-7RKGNM_R4_EN.pdf", "name": "http://www.apcmedia.com/salestools/SJHN-7RKGNM/SJHN-7RKGNM_R4_EN.pdf", "tags": [], "refsource": "CONFIRM"}, {"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14752", "name": "oval:org.mitre.oval:def:14752", "tags": [], "refsource": "OVAL"}, {"url": "http://marc.info/?l=bugtraq&m=134254866602253&w=2", "name": "HPSBMU02799", "tags": [], "refsource": "HP"}, {"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:058", "name": "MDVSA-2012:058", "tags": [], "refsource": "MANDRIVA"}, {"url": "http://rhn.redhat.com/errata/RHSA-2012-0508.html", "name": "RHSA-2012:0508", "tags": [], "refsource": "REDHAT"}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00009.html", "name": "SUSE-SU-2012:0602", "tags": [], "refsource": "SUSE"}, {"url": "http://security.gentoo.org/glsa/glsa-201203-02.xml", "name": "GLSA-201203-02", "tags": [], "refsource": "GENTOO"}, {"url": "http://secunia.com/advisories/48256", "name": "48256", "tags": [], "refsource": "SECUNIA"}, {"url": "http://www.securitytracker.com/id?1026704", "name": "1026704", "tags": [], "refsource": "SECTRACK"}, {"url": "http://secunia.com/advisories/47998", "name": "47998", "tags": [], "refsource": "SECUNIA"}, {"url": "http://www.debian.org/security/2012/dsa-2398", "name": "DSA-2398", "tags": [], "refsource": "DEBIAN"}, {"url": "http://curl.haxx.se/docs/adv_20120124B.html", "name": "http://curl.haxx.se/docs/adv_20120124B.html", "tags": [], "refsource": "CONFIRM"}, {"url": "https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02", "name": "https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02", "tags": [], "refsource": "MISC"}, {"url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-006", "name": "MS12-006", "tags": [], "refsource": "MS"}, {"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-556833.pdf", "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-556833.pdf", "tags": [], "refsource": "CONFIRM"}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html", "name": "openSUSE-SU-2020:0086", "tags": [], "refsource": "SUSE"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initialization vectors, which allows man-in-the-middle attackers to obtain plaintext HTTP headers via a blockwise chosen-boundary attack (BCBA) on an HTTPS session, in conjunction with JavaScript code that uses (1) the HTML5 WebSocket API, (2) the Java URLConnection API, or (3) the Silverlight WebClient API, aka a \"BEAST\" attack."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-20"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2011-3389", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "severity": "MEDIUM", "impactScore": 2.9, "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2011-09-06T19:55Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2021-07-23T15:12Z"}