CVE-2007-3108

The BN_from_montgomery function in crypto/bn/bn_mont.c in OpenSSL 0.9.8e and earlier does not properly perform Montgomery multiplication, which might allow local users to conduct a side-channel attack and retrieve RSA private keys.

🔗 References (92)

• secalert@redhathttp://cvs.openssl.org/chngview?cn=16275
• secalert@redhathttp://lists.vmware.com/pipermail/security-announce/2008/000002.html
• secalert@redhathttp://openssl.org/news/patch-CVE-2007-3108.txt
• secalert@redhathttp://secunia.com/advisories/26411
• secalert@redhathttp://secunia.com/advisories/26893
• secalert@redhathttp://secunia.com/advisories/27021
• secalert@redhathttp://secunia.com/advisories/27078
• secalert@redhathttp://secunia.com/advisories/27097
• secalert@redhathttp://secunia.com/advisories/27205
• secalert@redhathttp://secunia.com/advisories/27330
• secalert@redhathttp://secunia.com/advisories/27770
• secalert@redhathttp://secunia.com/advisories/27870
• secalert@redhathttp://secunia.com/advisories/28368
• secalert@redhathttp://secunia.com/advisories/30161
• secalert@redhathttp://secunia.com/advisories/30220