Description
The Diffie-Hellman key-exchange implementation in OpenSSL 0.9.8, when FIPS mode is enabled, does not properly validate a public parameter, which makes it easier for man-in-the-middle attackers to obtain the shared secret key by modifying network traffic, a related issue to CVE-2011-1923.
Remediation
References
Related Vulnerabilities
WordPress Plugin Forums 'url' Parameter Arbitrary File Disclosure (1.4.3)
WordPress Plugin Archive Posts Sort Customize Cross-Site Scripting (1.5)
Drupal Core 9.2.x Security Bypass (9.2.0 - 9.2.19)
WordPress Plugin Contact Form 7 Arbitrary File Upload (3.5.2)
Oracle Application Server Other Vulnerability (CVE-2002-0842)