CVE-2004-2682

N/A

Description

PeerSec MatrixSSL before 1.1 does not implement RSA blinding, which allows context-dependent attackers to obtain the server's private key by determining factors using timing differences on (1) the number of extra reductions during Montgomery reduction, and (2) the use of different integer multiplication algorithms ("Karatsuba" and normal), a related issue to CVE-2003-0147.

Details CVE

Score CVSS v3.1N/A

Publie12/31/2004

Derniere modification4/16/2026

Sourcenvd

Observations honeypot0

Produits affectes

peersec_networks:matrixssl

References

http://www.matrixssl.org/archives/000075.html(cve@mitre.org)

http://www.matrixssl.org/archives/000075.html(af854a3a-2127-422b-91ae-364da2661108)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.