CVE-2011-4121: Weak Encryption
The OpenSSL extension of Ruby (Git trunk) versions after 2011-09-01 up to 2011-11-03 always generated an exponent value of '1' to be used for private RSA key generation. A remote attacker could use this flaw to bypass or corrupt integrity of services, depending on strong private RSA keys generation mechanism.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2011-4121?
CVE-2011-4121 refers to a vulnerability in the OpenSSL extension of Ruby (Git trunk) versions after 2011-09-01 up to 2011-11-03.
What is the severity of CVE-2011-4121?
CVE-2011-4121 has a severity level of critical with a severity value of 9.
How does CVE-2011-4121 impact services?
CVE-2011-4121 can be used by a remote attacker to bypass or corrupt the integrity of services that rely on strong private RSA key generation.
Which software versions are affected by CVE-2011-4121?
CVE-2011-4121 affects Ruby (Git trunk) versions after 2011-09-01 up to 2011-11-03, as well as Ruby 1.8.7.334 and Ruby 1.9.1.
Where can I find more information about CVE-2011-4121?
You can find more information about CVE-2011-4121 at the following references: [Debian Security Tracker](https://security-tracker.debian.org/tracker/CVE-2011-4121), [Red Hat Bugzilla](https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-4121), [Red Hat CVE Database](https://access.redhat.com/security/cve/cve-2011-4121).