OpenSSL Other Vulnerability (CVE-2007-3108)

Description

The BN_from_montgomery function in crypto/bn/bn_mont.c in OpenSSL 0.9.8e and earlier does not properly perform Montgomery multiplication, which might allow local users to conduct a side-channel attack and retrieve RSA private keys.

Remediation

References

CVE-2007-3108

Related Vulnerabilities

Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2016-2157)

Piwigo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-9467)

WordPress Plugin Easy Registration Forms Cross-Site Scripting (1.8.3)

Oracle Application Server CVE-2004-1368 Vulnerability (CVE-2004-1368)

Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-8421)

Severity

Low

Classification