CVE-2008-7128

Published: Aug 31, 2009Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

The ssl_parse_client_key_exchange function in XySSL before 0.9 does not protect against certain Bleichenbacher attacks using chosen ciphertext, which allows remote attackers to recover keys via unspecified vectors.

Affected (8)

Products: Xyssl: Xyssl

Xyssl

1 product

Xyssl

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Xyssl Xyssl	version ≤ 0.8
Xyssl Xyssl	Version 0.1
Xyssl Xyssl	Version 0.2
Xyssl Xyssl	Version 0.3
Xyssl Xyssl	Version 0.4
Xyssl Xyssl	Version 0.5
Xyssl Xyssl	Version 0.6
Xyssl Xyssl	Version 0.7