CVE ID:	CVE-2011-4576
Description:	The SSL 3.0 implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly initialize data structures for block cipher padding, which might allow remote attackers to obtain sensitive information by decrypting the padding data sent by an SSL peer.
Test IDs:	1.3.6.1.4.1.25623.1.0.70708   1.3.6.1.4.1.25623.1.0.122006   1.3.6.1.4.1.25623.1.1.4.2012.0084.1   1.3.6.1.4.1.25623.1.0.71533   1.3.6.1.4.1.25623.1.0.70756   1.3.6.1.4.1.25623.1.0.122003
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2011-4576 48528 http://secunia.com/advisories/48528 55069 http://secunia.com/advisories/55069 57353 http://secunia.com/advisories/57353 APPLE-SA-2013-06-04-1 http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html DSA-2390 http://www.debian.org/security/2012/dsa-2390 FEDORA-2012-18035 http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092905.html HPSBMU02776 http://marc.info/?l=bugtraq&m=133951357207000&w=2 HPSBMU02786 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041 HPSBOV02793 http://marc.info/?l=bugtraq&m=134039053214295&w=2 HPSBUX02734 http://marc.info/?l=bugtraq&m=132750648501816&w=2 MDVSA-2012:006 http://www.mandriva.com/security/advisories?name=MDVSA-2012:006 MDVSA-2012:007 http://www.mandriva.com/security/advisories?name=MDVSA-2012:007 RHSA-2012:1306 http://rhn.redhat.com/errata/RHSA-2012-1306.html RHSA-2012:1307 http://rhn.redhat.com/errata/RHSA-2012-1307.html RHSA-2012:1308 http://rhn.redhat.com/errata/RHSA-2012-1308.html SSRT100729 http://marc.info/?l=bugtraq&m=132750648501816&w=2 SSRT100852 http://marc.info/?l=bugtraq&m=133951357207000&w=2 SSRT100877 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041 SSRT100891 http://marc.info/?l=bugtraq&m=134039053214295&w=2 SUSE-SU-2012:0084 http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00018.html VU#737740 http://www.kb.cert.org/vuls/id/737740 http://aix.software.ibm.com/aix/efixes/security/openssl_advisory3.asc http://aix.software.ibm.com/aix/efixes/security/openssl_advisory3.asc http://support.apple.com/kb/HT5784 http://support.apple.com/kb/HT5784 http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564 http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564 http://www.openssl.org/news/secadv_20120104.txt http://www.openssl.org/news/secadv_20120104.txt openSUSE-SU-2012:0083 http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00017.html