OpenSSL CBC Error Information Leakage Weakness

Threat level definition

OpenSSL CBC Error Information Leakage Weakness

References:

Apple Security Updates (Apple)
OpenBSD 3.2 release errata & patch list (OpenBSD)
Oracle Support Metalink (Oracle)
SSL Update for CERT CA200326 and older SSL issues (Oracle)
Sun Alert ID: 54147 (Sun)
Sun Alert ID: 56380 (Sun)
Sun Alert ID:54147 Timing Attack With Cipher Block Chaining (CBC) Mode Ciphers (Sun Microsystems)
Timing-based attacks on SSL/TLS with CBC encryption (OpenSSL Project)
TLS timing attack on OpenSSL [can-2003-78] [bid 6884] exploit ("Martin Vuagnoux" )

Privacy Statement
Copyright 2008, SecurityFocus