CVE-2010-4252

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 8.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2010-12-06 · updated 2026-06-16
Weakness: CWE-287

Description

OpenSSL before 1.0.0c, when J-PAKE is enabled, does not properly validate the public parameters in the J-PAKE protocol, which allows remote attackers to bypass the need for knowledge of the shared secret, and successfully authenticate, by sending crafted values in each round of the protocol.

Affected products

OpenSSL: through 1.0.0b; 0.9.1c, 0.9.2b, 0.9.3, 0.9.3a, 0.9.4, 0.9.5 (+69)

References

http://cvs.openssl.org/chngview?cn=20098
http://marc.info/?l=bugtraq&m=129916880600544&w=2
http://marc.info/?l=bugtraq&m=130497251507577&w=2
http://openssl.org/news/secadv_20101202.txt
http://seb.dbzteam.org/crypto/jpake-session-key-retrieval.pdf
http://secunia.com/advisories/42469
http://secunia.com/advisories/57353
http://securitytracker.com/id?1024823
http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.668471
http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564
http://www.securityfocus.com/bid/45163
http://www.vupen.com/english/advisories/2010/3120

Get alerted when CVE-2010-4252 or the next vulnerability affects your stack