CVE-2005-4839

PureTLS before 0.9b5 does not clear optional Extensions and Algorithm.Parameters values before parsing, which might trigger an information leak of values from earlier certificates.

Score

CVSS 2.0 5.0 Medium

Status

Modified - secalert@redhat.com

Published

2005-12-31

Last modified

2024-08-08

Affected products

• Puretls (Claymore Systems Inc)

References

• http://www.rtfm.com/puretls/
• http://www1.ietf.org/mail-archive/web/tls/current/msg00229.html