QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2012-0884

Back to search

CVE-2012-0884

Published: Mar 13, 2012

Modified: Aug 6, 2024

PUBLISHED

Description

The implementation of Cryptographic Message Syntax (CMS) and PKCS #7 in OpenSSL before 0.9.8u and 1.x before 1.0.0h does not properly restrict certain oracle behavior, which makes it easier for context-dependent attackers to decrypt data via a Million Message Attack (MMA) adaptive chosen ciphertext attack.

VendorProductVersions

n/a

n/a

affected
n/a

References

FEDORA-2012-4630
vendor-advisory
x_refsource_FEDORA
RHSA-2012:0531
vendor-advisory
x_refsource_REDHAT
FEDORA-2012-18035
vendor-advisory
x_refsource_FEDORA
RHSA-2012:1308
vendor-advisory
x_refsource_REDHAT
openSUSE-SU-2012:0547
vendor-advisory
x_refsource_SUSE
RHSA-2012:1307
vendor-advisory
x_refsource_REDHAT
48916
third-party-advisory
x_refsource_SECUNIA
RHSA-2012:0488
vendor-advisory
x_refsource_REDHAT
DSA-2454
vendor-advisory
x_refsource_DEBIAN
48895
third-party-advisory
x_refsource_SECUNIA
48580
third-party-advisory
x_refsource_SECUNIA
VU#737740
third-party-advisory
x_refsource_CERT-VN
RHSA-2012:1306
vendor-advisory
x_refsource_REDHAT
FEDORA-2012-4665
vendor-advisory
x_refsource_FEDORA
HPSBOV02793
vendor-advisory
x_refsource_HP
57353
third-party-advisory
x_refsource_SECUNIA
RHSA-2012:0426
vendor-advisory
x_refsource_REDHAT
HPSBUX02782
vendor-advisory
x_refsource_HP
SSRT100891
vendor-advisory
x_refsource_HP
SSRT100852
vendor-advisory
x_refsource_HP
FEDORA-2012-4659
vendor-advisory
x_refsource_FEDORA
HPSBMU02776
vendor-advisory
x_refsource_HP
SSRT100844
vendor-advisory
x_refsource_HP

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now