01 Record

CVE-2011-3389

The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode

UnratedPUBLISHEDCNA: mitre

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 73.33% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 99.4% of scored records. A rank, not a probability.
NVD base score: The NVD has published no score for this record
NVD CVSS vector: No NVD score to derive
NVD analysis status: Modified. NVD last modified this record on 2026-06-16.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2011-09-06 19:00Z15 YR AGO

Last updated

2024-08-06 23:29Z2 YR AGO

Reserved

2011-09-05

Assigning CNA

mitre

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-326Inadequate Encryption StrengthClass

Data version

5.1

Document digest

360792ece70d6bdd0431c675584042337c63e9b041d7d372d7e9242089a1978e

05 Affected products

VendorProductVersionsPlatforms

canonicalubuntu_linuxNot specified—

debiandebian_linuxNot specified—

googlechromeNot specified—

haxxcurlNot specified—

microsoftinternet_explorerNot specified—

microsoftwindowsNot specified—

mozillafirefoxNot specified—

operaopera_browserNot specified—

redhatenterprise_linuxNot specified—

redhatenterprise_linux_desktopNot specified—

redhatenterprise_linux_eusNot specified—

redhatenterprise_linux_serverNot specified—

redhatenterprise_linux_server_ausNot specified—

redhatenterprise_linux_workstationNot specified—

redhatnetwork_satelliteNot specified—

redhatrhel_extrasNot specified—

redhatrhel_extras_sapNot specified—

siemenssimatic_rf615rNot specified—

siemenssimatic_rf615r_firmwareNot specified—

siemenssimatic_rf68xrNot specified—

siemenssimatic_rf68xr_firmwareNot specified—

06 References

osvdb.org74829http://osvdb.org/74829vdb-entryx_refsource_OSVDB
eprint.iacr.orghttp://eprint.iacr.org/2004/111x_refsource_MISC
www.oracle.comhttp://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.htmlx_refsource_CONFIRM
isc.sans.eduhttp://isc.sans.edu/diary/SSL+TLS+part+3+/11635x_refsource_MISC
security.gentoo.orgGLSA-201406-32http://security.gentoo.org/glsa/glsa-201406-32.xmlvendor-advisoryx_refsource_GENTOO
secunia.com48692http://secunia.com/advisories/48692third-party-advisoryx_refsource_SECUNIA
marc.infoHPSBMU02799http://marc.info/?l=bugtraq&m=134254866602253&w=2vendor-advisoryx_refsource_HP
www.apcmedia.comhttp://www.apcmedia.com/salestools/SJHN-7RKGNM/SJHN-7RKGNM_R4_EN.pdfx_refsource_CONFIRM
marc.infoSSRT100805http://marc.info/?l=bugtraq&m=133365109612558&w=2vendor-advisoryx_refsource_HP
secunia.com55322http://secunia.com/advisories/55322third-party-advisoryx_refsource_SECUNIA
support.apple.comhttp://support.apple.com/kb/HT5130x_refsource_CONFIRM
bugzilla.redhat.comhttps://bugzilla.redhat.com/show_bug.cgi?id=737506x_refsource_CONFIRM
marc.infoHPSBUX02730http://marc.info/?l=bugtraq&m=132750579901589&w=2vendor-advisoryx_refsource_HP
lists.opensuse.orgSUSE-SU-2012:0602http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00009.htmlvendor-advisoryx_refsource_SUSE
www.securitytracker.com1025997http://www.securitytracker.com/id?1025997vdb-entryx_refsource_SECTRACK
www.us-cert.govTA12-010Ahttp://www.us-cert.gov/cas/techalerts/TA12-010A.htmlthird-party-advisoryx_refsource_CERT
lists.apple.comAPPLE-SA-2011-10-12-1http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.htmlvendor-advisoryx_refsource_APPLE
lists.opensuse.orgSUSE-SU-2012:0114http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00049.htmlvendor-advisoryx_refsource_SUSE
www.securityfocus.com49388http://www.securityfocus.com/bid/49388vdb-entryx_refsource_BID
ekoparty.orghttp://ekoparty.org/2011/juliano-rizzo.phpx_refsource_MISC
downloads.asterisk.orghttp://downloads.asterisk.org/pub/security/AST-2016-001.htmlx_refsource_CONFIRM
blogs.oracle.comhttps://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_fetchmailx_refsource_CONFIRM
rhn.redhat.comRHSA-2013:1455http://rhn.redhat.com/errata/RHSA-2013-1455.htmlvendor-advisoryx_refsource_REDHAT
secunia.com55351http://secunia.com/advisories/55351third-party-advisoryx_refsource_SECUNIA
www.kb.cert.orgVU#864643http://www.kb.cert.org/vuls/id/864643third-party-advisoryx_refsource_CERT-VN
lists.apple.comAPPLE-SA-2013-10-22-3http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.htmlvendor-advisoryx_refsource_APPLE
www.oracle.comhttp://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.htmlx_refsource_CONFIRM
www.securityfocus.com49778http://www.securityfocus.com/bid/49778vdb-entryx_refsource_BID
www.debian.orgDSA-2398http://www.debian.org/security/2012/dsa-2398vendor-advisoryx_refsource_DEBIAN
secunia.com48948http://secunia.com/advisories/48948third-party-advisoryx_refsource_SECUNIA
support.apple.comhttp://support.apple.com/kb/HT6150x_refsource_CONFIRM
lists.apple.comAPPLE-SA-2012-02-01-1http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.htmlvendor-advisoryx_refsource_APPLE
technet.microsoft.comhttp://technet.microsoft.com/security/advisory/2588513x_refsource_CONFIRM
hermes.opensuse.orgopenSUSE-SU-2012:0063https://hermes.opensuse.org/messages/13155432vendor-advisoryx_refsource_SUSE
blogs.technet.comhttp://blogs.technet.com/b/msrc/archive/2011/09/26/microsoft-releases-security-advisory-2588513.aspxx_refsource_CONFIRM
www.redhat.comRHSA-2011:1384http://www.redhat.com/support/errata/RHSA-2011-1384.htmlvendor-advisoryx_refsource_REDHAT
blogs.technet.comhttp://blogs.technet.com/b/srd/archive/2011/09/26/is-ssl-broken-more-about-security-advisory-2588513.aspxx_refsource_CONFIRM
www.opera.comhttp://www.opera.com/docs/changelogs/windows/1151/x_refsource_CONFIRM
hermes.opensuse.orgopenSUSE-SU-2012:0030https://hermes.opensuse.org/messages/13154861vendor-advisoryx_refsource_SUSE
eprint.iacr.orghttp://eprint.iacr.org/2006/136x_refsource_MISC
secunia.com48915http://secunia.com/advisories/48915third-party-advisoryx_refsource_SECUNIA
security.gentoo.orgGLSA-201203-02http://security.gentoo.org/glsa/glsa-201203-02.xmlvendor-advisoryx_refsource_GENTOO
marc.infoSSRT100740http://marc.info/?l=bugtraq&m=132872385320240&w=2vendor-advisoryx_refsource_HP
www.educatedguesswork.orghttp://www.educatedguesswork.org/2011/09/security_impact_of_the_rizzodu.htmlx_refsource_MISC
secunia.com48256http://secunia.com/advisories/48256third-party-advisoryx_refsource_SECUNIA
lists.apple.comAPPLE-SA-2012-09-19-2http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.htmlvendor-advisoryx_refsource_APPLE
www.securitytracker.com1026103http://www.securitytracker.com/id?1026103vdb-entryx_refsource_SECTRACK
support.apple.comhttp://support.apple.com/kb/HT4999x_refsource_CONFIRM
www.imperialviolet.orghttp://www.imperialviolet.org/2011/09/23/chromeandbeast.htmlx_refsource_CONFIRM
support.apple.comhttp://support.apple.com/kb/HT5501x_refsource_CONFIRM
www.insecure.clhttp://www.insecure.cl/Beast-SSL.rarx_refsource_MISC
ics-cert.us-cert.govhttps://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02x_refsource_MISC
support.apple.comhttp://support.apple.com/kb/HT5001x_refsource_CONFIRM
www.opera.comhttp://www.opera.com/docs/changelogs/mac/1160/x_refsource_CONFIRM
curl.haxx.sehttp://curl.haxx.se/docs/adv_20120124B.htmlx_refsource_CONFIRM
www.opera.comhttp://www.opera.com/support/kb/view/1004/x_refsource_CONFIRM
www.oracle.comhttp://www.oracle.com/technetwork/topics/security/javacpuoct2011-443431.htmlx_refsource_CONFIRM
www.securitytracker.com1026704http://www.securitytracker.com/id?1026704vdb-entryx_refsource_SECTRACK
lists.apple.comAPPLE-SA-2012-07-25-2http://lists.apple.com/archives/security-announce/2012/Jul/msg00001.htmlvendor-advisoryx_refsource_APPLE
my.opera.comhttp://my.opera.com/securitygroup/blog/2011/09/28/the-beast-ssl-tls-issuex_refsource_CONFIRM
rhn.redhat.comRHSA-2012:0508http://rhn.redhat.com/errata/RHSA-2012-0508.htmlvendor-advisoryx_refsource_REDHAT
secunia.com45791http://secunia.com/advisories/45791third-party-advisoryx_refsource_SECUNIA
www.securitytracker.com1029190http://www.securitytracker.com/id/1029190vdb-entryx_refsource_SECTRACK
www.mandriva.comMDVSA-2012:058http://www.mandriva.com/security/advisories?name=MDVSA-2012:058vendor-advisoryx_refsource_MANDRIVA
secunia.com47998http://secunia.com/advisories/47998third-party-advisoryx_refsource_SECUNIA
marc.infoSSRT100867http://marc.info/?l=bugtraq&m=134254957702612&w=2vendor-advisoryx_refsource_HP
secunia.com49198http://secunia.com/advisories/49198third-party-advisoryx_refsource_SECUNIA
www.redhat.comRHSA-2012:0006http://www.redhat.com/support/errata/RHSA-2012-0006.htmlvendor-advisoryx_refsource_REDHAT
blog.mozilla.comhttp://blog.mozilla.com/security/2011/09/27/attack-against-tls-protected-communications/x_refsource_CONFIRM
www.opera.comhttp://www.opera.com/docs/changelogs/windows/1160/x_refsource_CONFIRM
lists.opensuse.orgSUSE-SU-2012:0122http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00051.htmlvendor-advisoryx_refsource_SUSE
marc.infoHPSBUX02777http://marc.info/?l=bugtraq&m=133728004526190&w=2vendor-advisoryx_refsource_HP
oval.cisecurity.orgoval:org.mitre.oval:def:14752https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14752vdb-entrysignaturex_refsource_OVAL
www.opera.comhttp://www.opera.com/docs/changelogs/unix/1151/x_refsource_CONFIRM
www.opera.comhttp://www.opera.com/docs/changelogs/mac/1151/x_refsource_CONFIRM
docs.microsoft.comMS12-006https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-006vendor-advisoryx_refsource_MS
www.opera.comhttp://www.opera.com/docs/changelogs/unix/1160/x_refsource_CONFIRM
googlechromereleases.blogspot.comhttp://googlechromereleases.blogspot.com/2011/10/chrome-stable-release.htmlx_refsource_CONFIRM
support.apple.comhttp://support.apple.com/kb/HT5281x_refsource_CONFIRM
lists.apple.comAPPLE-SA-2011-10-12-2http://lists.apple.com/archives/Security-announce/2011//Oct/msg00002.htmlvendor-advisoryx_refsource_APPLE
bugzilla.novell.comhttps://bugzilla.novell.com/show_bug.cgi?id=719047x_refsource_CONFIRM
h20564.www2.hp.comHPSBMU02900https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03839862vendor-advisoryx_refsource_HP
vnhacker.blogspot.comhttp://vnhacker.blogspot.com/2011/09/beast.htmlx_refsource_MISC
www.ubuntu.comUSN-1263-1http://www.ubuntu.com/usn/USN-1263-1vendor-advisoryx_refsource_UBUNTU
lists.apple.comAPPLE-SA-2012-05-09-1http://lists.apple.com/archives/security-announce/2012/May/msg00001.htmlvendor-advisoryx_refsource_APPLE
secunia.com55350http://secunia.com/advisories/55350third-party-advisoryx_refsource_SECUNIA
www.ibm.comhttp://www.ibm.com/developerworks/java/jdk/alerts/x_refsource_CONFIRM
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/pdf/ssa-556833.pdfx_refsource_CONFIRM
lists.opensuse.orgopenSUSE-SU-2020:0086http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.htmlvendor-advisoryx_refsource_SUSE

01 Record index

CVE-2011-3389

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2011-3389

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References