CVE-2007-3108
- State
- Published
- Severity
- Not scored
- Published
- Aug 8, 2007
- Updated
- Aug 7, 2024
- Reserved
- Jun 7, 2007
Description
The BN_from_montgomery function in crypto/bn/bn_mont.c in OpenSSL 0.9.8e and earlier does not properly perform Montgomery multiplication, which might allow local users to conduct a side-channel attack and retrieve RSA private keys.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- http://support.attachmate.com/techdocs/2374.html
- http://www.kb.cert.org/vuls/id/RGII-74KLP3
- VU#724968third-party-advisory
- 26893third-party-advisory
- DSA-1571vendor-advisory
- 27205third-party-advisory
- 20070813 FLEA-2007-0043-1 opensslmailing-list
- 27097third-party-advisory
- ADV-2008-2362vdb-entry
- ADV-2007-2759vdb-entry
- oval:org.mitre.oval:def:9984vdb-entrysignature
- 31489third-party-advisory
- RHSA-2007:1003vendor-advisory
- 31531third-party-advisory
- MDKSA-2007:193vendor-advisory
- http://www.bluecoat.com/support/securityadvisories/advisory_openssl_rsa_key_reconstruction_vulnerability
- 30220third-party-advisory
- https://issues.rpath.com/browse/RPL-1633
- ADV-2007-4010vdb-entry
- 20080108 VMSA-2008-0001 Moderate OpenPegasus PAM Authentication Buffer Overflow and updated service console packagesmailing-list
- 27770third-party-advisory
- [Security-announce] 20080107 VMSA-2008-0001 Moderate OpenPegasus PAM Authentication Buffer Overflow and updated service console packagesmailing-list
- 26411third-party-advisory
- USN-522-1vendor-advisory
- http://openssl.org/news/patch-CVE-2007-3108.txt
- ADV-2008-2361vdb-entry
- 31467third-party-advisory
- RHSA-2007:0964vendor-advisory
- 27870third-party-advisory
- ADV-2008-2396vdb-entry
- 27330third-party-advisory
- 30161third-party-advisory
- GLSA-200805-07vendor-advisory
- http://www.vmware.com/security/advisories/VMSA-2008-0013.html
- 28368third-party-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2007-485.htm
- 27078third-party-advisory
- GLSA-200710-06vendor-advisory
- http://cvs.openssl.org/chngview?cn=16275
- https://issues.rpath.com/browse/RPL-1613
- RHSA-2007:0813vendor-advisory
- 25163vdb-entry
- http://www.vmware.com/security/advisories/VMSA-2008-0001.html
- ADV-2008-0064vdb-entry
- 27021third-party-advisory
- 20080123 UPDATED VMSA-2008-0001.1 Moderate OpenPegasus PAM Authentication Buffer Overflow and updated service console packagesmailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.