A weakness has been reported in PolarSSL, which can be exploited by malicious people to disclose sensitive information and bypass certain security restrictions.

The weakness is caused due to weak encryption when generating Diffie-Hellman values and RSA keys, which can be exploited to brute force the private value and master secret and disclose the communication channel via Man-in-the-Middle (MitM) attacks.

The weakness is reported in versions 0.99-pre4 through 1.1.1.

Solution
Update or upgrade to version 1.1.2.

Provided and/or discovered by
The vendor credits Ruslan Yushchenko.

Original Advisory
PolarSSL Security Advisory 2012-01:
http://polarssl.org/trac/wiki/SecurityAdvisory201201

Deep Links
Links available to Secunia VIM customers