Description

The BN_from_montgomery function in crypto/bn/bn_mont.c in OpenSSL 0.9.8e and earlier does not properly perform Montgomery multiplication, which might allow local users to conduct a side-channel attack and retrieve RSA private keys.

Remediation

References

CVE-2007-3108

Related Vulnerabilities

phpMyFAQ Weak Password Requirements Vulnerability (CVE-2022-3754)

Apache Tomcat Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2007-5333)

ownCloud Files or Directories Accessible to External Parties Vulnerability (CVE-2015-4715)

WordPress Plugin Appointment Booking Calendar and Online Scheduling-BookingPress Arbitrary File Creation (1.1.5)

Beego Framework Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2021-27116)

Severity

Low

Classification

CVE-2007-3108

Tags

Missing Update Known Vulnerabilities