| ID | CVE-2011-1945 | ||||||
| Sažetak | The elliptic curve cryptography (ECC) subsystem in OpenSSL 1.0.0d and earlier, when the Elliptic Curve Digital Signature Algorithm (ECDSA) is used for the ECDHE_ECDSA cipher suite, does not properly implement curves over binary fields, which makes it easier for context-dependent attackers to determine private keys via a timing attack and a lattice calculation. | ||||||
| Reference |
|
||||||
| CVSS |
|
||||||
| Pristup |
|
||||||
| Impact |
|
||||||
| CVSS vektor | AV:N/AC:H/Au:N/C:P/I:N/A:N | ||||||
| Zadnje važnije ažuriranje | 06-06-2013 - 03:10 | ||||||
| Objavljeno | 31-05-2011 - 20:55 |
