CVE-2004-2682

PeerSec MatrixSSL before 1.1 does not implement RSA blinding, which allows context-dependent attackers to obtain the server's private key by determining…

published July 5, 2007

CVSS
—
EPSS
1%
Percentile
55.5
In the wild
Unconfirmed
What it is

PeerSec MatrixSSL before 1.1 does not implement RSA blinding, which allows context-dependent attackers to obtain the server's private key by determining factors using timing differences on (1) the number of extra reductions during Montgomery reduction, and (2) the use of different integer multiplication algorithms ("Karatsuba" and normal), a related issue to CVE-2003-0147.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00790 · 55.5th percentile
Published
2007-07-05T20:00Z
EPSS history
Timeline
  • 05 JUL 20:00Z
    PeerSec MatrixSSL before 1.1 does not implement RSA blinding, which allows context-dependent attackers to obtain the server's private key by determining…
    cvelistv5