Unscored CVE-2005-4839 EUVD-2005-4831GHSA-m93p-78fx-rr4f

PureTLS before 0.9b5 does not clear optional Extensions and Algorithm.Parameters values before parsing, which might trigger an information …

Published Apr 30, 2007 · Updated Aug 8, 2024 · Assigned by redhat

Description

PureTLS before 0.9b5 does not clear optional Extensions and Algorithm.Parameters values before parsing, which might trigger an information leak of values from earlier certificates.

References

http://www.rtfm.com/puretls/
[TLS] 20050602 ANNOUNCE: PureTLS 0.9b5 mailing-list