National Cyber Awareness System

Vulnerability Summary for CVE-2011-3389

Overview

The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initialization vectors, which allows man-in-the-middle attackers to obtain plaintext HTTP headers via a blockwise chosen-boundary attack (BCBA) on an HTTPS session, in conjunction with JavaScript code that uses (1) the HTML5 WebSocket API, (2) the Java URLConnection API, or (3) the Silverlight WebClient API, aka a "BEAST" attack.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

US-CERT Technical Alert: TA12-010A

Name: TA12-010A

Hyperlink:http://www.us-cert.gov/cas/techalerts/TA12-010A.html

US-CERT Vulnerability Note: VU#864643

Name: VU#864643

Hyperlink:http://www.kb.cert.org/vuls/id/864643

External Source: MISC

Name: http://www.insecure.cl/Beast-SSL.rar

Type: Patch Information

Hyperlink:http://www.insecure.cl/Beast-SSL.rar

External Source: SUSE

Name: openSUSE-SU-2012:0063

Hyperlink:https://hermes.opensuse.org/messages/13155432

External Source: SUSE

Name: openSUSE-SU-2012:0030

Hyperlink:https://hermes.opensuse.org/messages/13154861

External Source: CONFIRM

Name: https://bugzilla.redhat.com/show_bug.cgi?id=737506

Hyperlink:https://bugzilla.redhat.com/show_bug.cgi?id=737506

External Source: CONFIRM

Name: https://bugzilla.novell.com/show_bug.cgi?id=719047

Hyperlink:https://bugzilla.novell.com/show_bug.cgi?id=719047

External Source: CONFIRM

Name: https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_fetchmail

Hyperlink:https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_fetchmail

External Source: SECTRACK

Name: 1026103

Hyperlink:http://www.securitytracker.com/id?1026103

External Source: SECTRACK

Name: 1025997

Hyperlink:http://www.securitytracker.com/id?1025997

External Source: BID

Name: 49778

Hyperlink:http://www.securityfocus.com/bid/49778

External Source: BID

Name: 49388

Hyperlink:http://www.securityfocus.com/bid/49388

External Source: REDHAT

Name: RHSA-2012:0006

Hyperlink:http://www.redhat.com/support/errata/RHSA-2012-0006.html

External Source: REDHAT

Name: RHSA-2011:1384

Type: Advisory

Hyperlink:http://www.redhat.com/support/errata/RHSA-2011-1384.html

External Source: CONFIRM

Name: http://www.oracle.com/technetwork/topics/security/javacpuoct2011-443431.html

Hyperlink:http://www.oracle.com/technetwork/topics/security/javacpuoct2011-443431.html

External Source: CONFIRM

Name: http://www.opera.com/support/kb/view/1004/

Type: Advisory

Hyperlink:http://www.opera.com/support/kb/view/1004/

External Source: CONFIRM

Name: http://www.opera.com/docs/changelogs/windows/1160/

Hyperlink:http://www.opera.com/docs/changelogs/windows/1160/

External Source: CONFIRM

Name: http://www.opera.com/docs/changelogs/windows/1151/

Hyperlink:http://www.opera.com/docs/changelogs/windows/1151/

External Source: CONFIRM

Name: http://www.opera.com/docs/changelogs/unix/1160/

Hyperlink:http://www.opera.com/docs/changelogs/unix/1160/

External Source: CONFIRM

Name: http://www.opera.com/docs/changelogs/unix/1151/

Hyperlink:http://www.opera.com/docs/changelogs/unix/1151/

External Source: CONFIRM

Name: http://www.opera.com/docs/changelogs/mac/1160/

Hyperlink:http://www.opera.com/docs/changelogs/mac/1160/

External Source: CONFIRM

Name: http://www.opera.com/docs/changelogs/mac/1151/

Hyperlink:http://www.opera.com/docs/changelogs/mac/1151/

External Source: MISC

Name: http://www.imperialviolet.org/2011/09/23/chromeandbeast.html

Hyperlink:http://www.imperialviolet.org/2011/09/23/chromeandbeast.html

External Source: CONFIRM

Name: http://www.ibm.com/developerworks/java/jdk/alerts/

Hyperlink:http://www.ibm.com/developerworks/java/jdk/alerts/

External Source: MISC

Name: http://www.educatedguesswork.org/2011/09/security_impact_of_the_rizzodu.html

Hyperlink:http://www.educatedguesswork.org/2011/09/security_impact_of_the_rizzodu.html

External Source: MISC

Name: http://vnhacker.blogspot.com/2011/09/beast.html

Hyperlink:http://vnhacker.blogspot.com/2011/09/beast.html

External Source: MS

Name: MS12-006

Type: Advisory

Hyperlink:http://technet.microsoft.com/security/bulletin/MS12-006

External Source: CONFIRM

Name: http://technet.microsoft.com/security/advisory/2588513

Hyperlink:http://technet.microsoft.com/security/advisory/2588513

External Source: CONFIRM

Name: http://support.apple.com/kb/HT5501

Hyperlink:http://support.apple.com/kb/HT5501

External Source: CONFIRM

Name: http://support.apple.com/kb/HT5281

Hyperlink:http://support.apple.com/kb/HT5281

External Source: CONFIRM

Name: http://support.apple.com/kb/HT5130

Hyperlink:http://support.apple.com/kb/HT5130

External Source: CONFIRM

Name: http://support.apple.com/kb/HT5001

Hyperlink:http://support.apple.com/kb/HT5001

External Source: CONFIRM

Name: http://support.apple.com/kb/HT4999

Hyperlink:http://support.apple.com/kb/HT4999

External Source: SECUNIA

Name: 49198

Hyperlink:http://secunia.com/advisories/49198

External Source: SECUNIA

Name: 48948

Hyperlink:http://secunia.com/advisories/48948

External Source: SECUNIA

Name: 48915

Hyperlink:http://secunia.com/advisories/48915

External Source: SECUNIA

Name: 48692

Hyperlink:http://secunia.com/advisories/48692

External Source: SECUNIA

Name: 45791

Type: Advisory

Hyperlink:http://secunia.com/advisories/45791

External Source: OVAL

Name: oval:org.mitre.oval:def:14752

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14752

External Source: OSVDB

Name: 74829

Hyperlink:http://osvdb.org/74829

External Source: CONFIRM

Name: http://my.opera.com/securitygroup/blog/2011/09/28/the-beast-ssl-tls-issue

Hyperlink:http://my.opera.com/securitygroup/blog/2011/09/28/the-beast-ssl-tls-issue

External Source: HP

Name: SSRT100740

Hyperlink:http://marc.info/?l=bugtraq&m=132872385320240&w=2

External Source: HP

Name: HPSBMU02742

Hyperlink:http://marc.info/?l=bugtraq&m=132872385320240&w=2

External Source: HP

Name: SSRT100710

Hyperlink:http://marc.info/?l=bugtraq&m=132750579901589&w=2

External Source: HP

Name: HPSBUX02730

Hyperlink:http://marc.info/?l=bugtraq&m=132750579901589&w=2

External Source: SUSE

Name: SUSE-SU-2012:0122

Hyperlink:http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00051.html

External Source: SUSE

Name: SUSE-SU-2012:0114

Hyperlink:http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00049.html

External Source: APPLE

Name: APPLE-SA-2012-09-19-2

Hyperlink:http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html

External Source: APPLE

Name: APPLE-SA-2012-05-09-1

Hyperlink:http://lists.apple.com/archives/security-announce/2012/May/msg00001.html

External Source: APPLE

Name: APPLE-SA-2012-07-25-2

Hyperlink:http://lists.apple.com/archives/security-announce/2012/Jul/msg00001.html

External Source: APPLE

Name: APPLE-SA-2012-02-01-1

Hyperlink:http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html

External Source: APPLE

Name: APPLE-SA-2011-10-12-2

Hyperlink:http://lists.apple.com/archives/Security-announce/2011//Oct/msg00002.html

External Source: APPLE

Name: APPLE-SA-2011-10-12-1

Hyperlink:http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html

External Source: MISC

Name: http://isc.sans.edu/diary/SSL+TLS+part+3+/11635

Hyperlink:http://isc.sans.edu/diary/SSL+TLS+part+3+/11635

External Source: CONFIRM

Name: http://googlechromereleases.blogspot.com/2011/10/chrome-stable-release.html

Hyperlink:http://googlechromereleases.blogspot.com/2011/10/chrome-stable-release.html

External Source: MISC

Name: http://eprint.iacr.org/2006/136

Hyperlink:http://eprint.iacr.org/2006/136

External Source: MISC

Name: http://eprint.iacr.org/2004/111

Hyperlink:http://eprint.iacr.org/2004/111

External Source: MISC

Name: http://ekoparty.org/2011/juliano-rizzo.php

Hyperlink:http://ekoparty.org/2011/juliano-rizzo.php

External Source: CONFIRM

Name: http://blogs.technet.com/b/srd/archive/2011/09/26/is-ssl-broken-more-about-security-advisory-2588513.aspx

Hyperlink:http://blogs.technet.com/b/srd/archive/2011/09/26/is-ssl-broken-more-about-security-advisory-2588513.aspx

External Source: CONFIRM

Name: http://blogs.technet.com/b/msrc/archive/2011/09/26/microsoft-releases-security-advisory-2588513.aspx

Hyperlink:http://blogs.technet.com/b/msrc/archive/2011/09/26/microsoft-releases-security-advisory-2588513.aspx

External Source: CONFIRM

Name: http://blog.mozilla.com/security/2011/09/27/attack-against-tls-protected-communications/

Hyperlink:http://blog.mozilla.com/security/2011/09/27/attack-against-tls-protected-communications/

References to Check Content

Identifier:oval:org.mitre.oval:def:14752

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:14752