Detections
Analytics
OpenSSL Private Key Disclosure
medium Log Correlation Engine Plugin ID 801066
Synopsis
N/ADescription
The remote host is running a version of OpenSSL which is vulnerable to a timing attack which may allow an attacker to recover the content of fixed data blocks and even eventually the RSA private key of the web server.Solution
Upgrade to OpenSSL 0.9.6i or 0.9.7aSee Also
http://.openssl.org/news/secadv_20030219.txt
Plugin Details
Severity: Medium
ID: 801066
Family: Web Servers
Nessus ID: 11267