PolarSSL RSA Private Key Recovery Security Bypass Vulnerability
BID:62771
Info
PolarSSL RSA Private Key Recovery Security Bypass Vulnerability
| Bugtraq ID: | 62771 |
| Class: | Unknown |
| CVE: |
CVE-2013-5915 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 01 2013 12:00AM |
| Updated: | Apr 13 2015 09:15PM |
| Credit: | Cyril Arnaud and Pierre-Alain Fouque |
| Vulnerable: |
Offspark PolarSSL 1.2.8 Offspark PolarSSL 1.2.7 Gentoo Linux Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 |
| Not Vulnerable: |
Offspark PolarSSL 1.2.9 Offspark PolarSSL 1.3.0 |
Exploit / POC
References
PolarSSL RSA Private Key Recovery Security Bypass Vulnerability
References:
References:
- Vendor Homepage (PolarSSL)
- PolarSSL Security Advisory 2013-05 (PolarSSL)