CVE-2011-3389: Weak Encryption
Juliano Rizzo announced: [1] http://www.ekoparty.org/2011/juliano-rizzo.php
that at ekoparty Security Conference, from 2011-09-21 to 2011-09-23 they will present a new fast block-wise chosen-plaintext attack against SSL/TLS. One application of the attack should allow the adversary to efficiently decrypt and obtain authentication tokens and cookies from HTTPS requests.
The Red Hat Security Response Team is watching progress on this one and once further details are available, we will immediately react to ensure timely manner updates for affected packages.
Other sources
The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initialization vectors, which allows man-in-the-middle attackers to obtain plaintext HTTP headers via a blockwise chosen-boundary attack (BCBA) on an HTTPS session, in conjunction with JavaScript code that uses (1) the HTML5 WebSocket API, (2) the Java URLConnection API, or (3) the Silverlight WebClient API, aka a "BEAST" attack.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2011-3389?
CVE-2011-3389 has been classified as a critical vulnerability impacting SSL/TLS, allowing for block-wise chosen-plaintext attacks.
How do I fix CVE-2011-3389?
To mitigate CVE-2011-3389, upgrade to the recommended patched versions of the affected Java packages provided by Red Hat and Debian.
What software is affected by CVE-2011-3389?
CVE-2011-3389 affects various versions of Java, browsers like Opera, Internet Explorer, Google Chrome, and Mozilla Firefox, among others.
Can CVE-2011-3389 be exploited remotely?
Yes, CVE-2011-3389 can be exploited remotely, allowing attackers to execute unauthorized actions on a vulnerable system.
Is CVE-2011-3389 still a problem today?
While CVE-2011-3389 was disclosed in 2011, it remains relevant for older systems that have not been updated or patched.