|
|
|
|
|
|
|
|
|
Secunia Advisory SA9635Java Secure Socket Extention CBC Timing Attack Vulnerability
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||
Description
Sun has confirmed an older vulnerability in Java Secure Socket Extention (JSSE), which can be exploited by malicious people to gain knowledge of a plaintext block used to encrypt a SSL/TLS session. Solution http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/56380 Other references Deep Links Do you have additional information related to this advisory?Please provide information about patches, mitigating factors, new versions, exploits, faulty patches, links, and other relevant data by posting comments to this Advisory. You can also send this information to vuln@secunia.com
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||
