CVE-2004-2682

N/A

Descripcion

PeerSec MatrixSSL before 1.1 does not implement RSA blinding, which allows context-dependent attackers to obtain the server's private key by determining factors using timing differences on (1) the number of extra reductions during Montgomery reduction, and (2) the use of different integer multiplication algorithms ("Karatsuba" and normal), a related issue to CVE-2003-0147.

Detalles CVE

Puntuacion CVSS v3.1N/A

Publicado12/31/2004

Ultima modificacion4/16/2026

Fuentenvd

Avistamientos honeypot0

Productos afectados

peersec_networks:matrixssl

Referencias

http://www.matrixssl.org/archives/000075.html(cve@mitre.org)

http://www.matrixssl.org/archives/000075.html(af854a3a-2127-422b-91ae-364da2661108)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.