Description

The Diffie-Hellman key-exchange implementation in OpenSSL 0.9.8, when FIPS mode is enabled, does not properly validate a public parameter, which makes it easier for man-in-the-middle attackers to obtain the shared secret key by modifying network traffic, a related issue to CVE-2011-1923.

Remediation

References

CVE-2011-5095

Related Vulnerabilities

WordPress Plugin Contextual Related Posts Multiple Vulnerabilities (3.3.1)

WordPress Plugin WooCommerce Amazon Affiliates Multiple Vulnerabilities (8.0)

Moodle Files or Directories Accessible to External Parties Vulnerability (CVE-2025-26525)

Apache HTTP Server Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2001-0925)

OpenSSL Improper Verification of Cryptographic Signature Vulnerability (CVE-2025-15469)

Severity

Medium

Classification

CVE-2011-5095

Tags

Missing Update Known Vulnerabilities