Test ID:	1.3.6.1.4.1.25623.1.0.106517
Category:	General
Title:	MatrixSSL < 3.8.7 Cryptographic Vulnerability
Summary:	MatrixSSL is prone to a vulnerability in the modular; exponentiation function.
Description:	Summary: MatrixSSL is prone to a vulnerability in the modular exponentiation function. Vulnerability Insight: The pstm_exptmod function in MatrixSSL does not properly perform modular expontiation, which might allow remote attackers to predict the secret key via unspecified vectors. This vulnerability exists because of an incomplete fix for CVE-2016-6887. Affected Software/OS: MatrixSSL versions 3.8.6 and prior. Solution: Update to version 3.8.7 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-8671 BugTraq ID: 95439 http://www.securityfocus.com/bid/95439 https://blog.fuzzing-project.org/54-Update-on-MatrixSSL-miscalculation-CVE-2016-8671,-incomplete-fix-for-CVE-2016-6887.html http://www.openwall.com/lists/oss-security/2016/10/15/8 http://www.openwall.com/lists/oss-security/2016/10/15/2
Copyright	Copyright (C) 2017 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.