CVE-2016-0704

An oracle protection mechanism in the get_client_master_key function in s2_srvr.c in the SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a overwrites incorrect MASTER-KEY bytes during use of export cipher suites, which makes it easier for remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, a related issue to CVE-2016-0800.

Severity	MEDIUM
CVSS	5.9
CWE	CWE-200
KEV
Published	10 years ago
Modified	1 week ago

Related Products

Product	Advisory	Evidence
UCS B-Series Blade Server Software	cisco-sa-20160302-openssl	Cisco OpenVuln
Plug-in for OpenFlow	cisco-sa-20160302-openssl	Cisco OpenVuln
Intrusion Prevention System (IPS)	cisco-sa-20160302-openssl	Cisco OpenVuln
Headend System Releases	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco onePK All-in-One Virtual Machine	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Wireless LAN Controller (WLC)	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Wide Area Application Services (WAAS)	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Webex Meetings	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco WebEx Training Center	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco WebEx Support Center	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco WebEx Node for MCS	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco WebEx Meetings for Windows Phone 8	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco WebEx Meetings for Android	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco WebEx Meetings Server	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco WebEx Meeting Center	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco WebEx Event Center	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco WebEx Connect	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Visual Quality Experience	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Virtualization Experience Media Engine	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Videoscape Control Suite	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Video Surveillance PTZ IP Cameras	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Video Surveillance Media Server Software	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Video Surveillance 7000 Series IP Cameras	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Video Surveillance 6000 Series IP Cameras	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Video Surveillance 4000 Series IP Camera	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Video Surveillance 3000 Series IP Cameras	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Unity Express	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Unity Connection	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Unity	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Unified Intelligence Center	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Unified IP Phone 8945	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Unified IP Phone 7900 Series	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Unified Contact Center Express	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Unified Contact Center Enterprise	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Unified Contact Center	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Unified Computing System Central Software	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Unified Computing System (Management Software)	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Unified Communications Domain Manager	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Unified Attendant Console	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Unified 7800 Series IP Phones	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco UCS B-Series Blade Server Software	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Telepresence Conductor	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco TelePresence Video Communication Server (VCS)	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco TelePresence Serial Gateway Series	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco TelePresence ISDN Link	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco TelePresence ISDN GW 3241	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco TelePresence	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco SocialMiner	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Show and Share	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Security Manager	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Secure Email and Web Manager	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Secure Email	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Secure Client	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco SPA232D Multi-Line DECT ATA	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco SPA122 ATA with Router	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco SPA112 2-Port Phone Adapter	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Registered Envelope Service	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Prime Security Manager (PRSM)	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Prime Performance Manager	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Prime Optical	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Prime Network Services Controller	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Prime Network Registrar	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Prime Network	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Prime License Manager	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Prime LAN Management Solution (LMS)	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Prime Infrastructure	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Prime IP Express	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Prime Home Installation	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Prime Home	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Prime Data Center Network Manager (DCNM)	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Prime Collaboration Provisioning	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Prime Collaboration Deployment	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Prime Collaboration Assurance	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Prime Collaboration	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Prime Access Registrar	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Policy Suite (CPS) Software	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Plug-in for OpenFlow	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Physical Access Gateway	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Paging Server	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Packet Tracer	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco ONS 15454 System Software	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Nexus 3000 Series Switch	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Nexus 1000V Switch	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Nexus 1000V InterCloud for VMware	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Network Analysis Module (NAM) Software	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Network Admission Control Guest Server	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Model D9485 DAVIC QPSK Mod / Demod	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Mobility Services Engine	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco MeetingPlace Server	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco MediaSense	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco MATE Live	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco MATE Design	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco MATE Collector	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Jabber for iOS	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Jabber for Windows	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Jabber for Mac	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Jabber Software Development Kit	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Jabber IM for Android	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Jabber Guest	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Jabber	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco IronPort Encryption Appliance	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Intrusion Prevention System (IPS)	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Identity Services Engine Software	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco IP Interoperability and Collaboration System (IPICS)	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco IOS XR Software	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco IOS	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Hosted Collaboration Mediation Fulfillment	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Headend System Releases	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Firepower System Software	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Finesse	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Expressway	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Enterprise Content Delivery System (ECDS)	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Emergency Responder	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Email Security Appliance (ESA)	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Digital Media Manager Software	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Digital Content Manager (DCM) Software	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Content Security Management Appliance (SMA)	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Connected Grid Network Management System (CG-NMS)	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Cloupia Unified Infrastructure Controller	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Application and Content Networking System (ACNS) Software	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco AnyRes Live	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco AnyConnect Secure Mobility Client	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Aironet Access Point Software	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Agent Desktop	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco Adaptive Security Appliance (ASA) Software	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco ATA 187 Analog Telephone Adaptor	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco ASR 5000 Series Software	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco ASA CX Context-Aware Security Software	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco ACE Application Control Engine Module	cisco-sa-20160302-openssl	Cisco OpenVuln
Cisco ACE 4700 Series Application Control Engine Appliances	cisco-sa-20160302-openssl	Cisco OpenVuln
Application and Content Networking System (ACNS) Software	cisco-sa-20160302-openssl	Cisco OpenVuln