Skip to content
Fencer Intel
medium 4.3

CVE-2011-3389 json

The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, O…

published 2011-09-06 15 y ago modified 2026-10-09 31 d ago also EUVD-2011-3352

cvss
4.3
version 2.0, NVD
cisa kev
Not listed
not in CISA's catalog
epss
73.3%
EPSS 73.3% chance of exploitation in 30 days, percentile 99.4%
public exploits
1
Metasploit

Summary

The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initialization vectors, which allows man-in-the-middle attackers to obtain plaintext HTTP headers via a blockwise chosen-boundary attack (BCBA) on an HTTPS session, in conjunction with JavaScript code that uses (1) the HTML5 WebSocket API, (2) the Java URLConnection API, or (3) the Silverlight WebClient API, aka a "BEAST" attack.

Patch / fix

  • google chrome 15.0.874.102
  • haxx curl 7.24.0
  • microsoft internet_explorer 7
  • opera opera_browser 12
  • oracle java_se 1.4.2_34, 1.5.0_32, 1.6.0_29, 4.2.34, 5.0.32, 6.0.29
  • oracle jdk 1.4.2_34, 1.5.0_32, 1.6.0_29, 4.2.34, 5.0.32, 6.0.29
  • oracle jre 1.4.2_34, 1.5.0_32, 1.6.0_29, 4.2.34, 5.0.32, 6.0.29
  • sun java 1.4.2_34, 1.5.0_32, 1.6.0_29, 4.2.34, 5.0.32, 6.0.29
  • sun java_se 1.4.2_34, 1.5.0_32, 1.6.0_29, 4.2.34, 5.0.32, 6.0.29
  • sun jdk 1.4.2_34, 1.5.0_32, 1.6.0_29, 4.2.34, 5.0.32, 6.0.29
  • sun jre 1.4.2_34, 1.5.0_32, 1.6.0_29, 4.2.34, 5.0.32, 6.0.29
  • oracle openjdk 1.4.2_34, 1.5.0_32, 1.6.0_29, 4.2.34, 5.0.32, 6.0.29
  • sun openjdk 1.4.2_34, 1.5.0_32, 1.6.0_29, 4.2.34, 5.0.32, 6.0.29
  • oracle jrockit R28.1.5
  • siemens simatic_rf615r_firmware 3.2.1
  • siemens simatic_rf68xr_firmware 3.2.1
  • nss Debian 14, Debian 13, Debian 12 3.13.1.with.ckbi.1.88-1
  • curl Debian 14, Debian 13, Debian 12 7.24.0-1
  • pound Debian 14, Debian 13 2.6-2
  • erlang Debian 14, Debian 13, Debian 12 1:15.b-dfsg-1
  • asterisk Debian 14 1:13.7.2~dfsg-1
  • lighttpd Debian 14, Debian 13, Debian 12 1.4.30-1
  • bouncycastle Debian 14, Debian 13, Debian 12 1.49+dfsg-1

debian advisories DEBIAN-CVE-2011-3389

  • java-1.6.0-ibm network satellite 5.4 1:1.6.0.14.0-1jpp.1.el5_9
  • java-1.6.0-ibm network satellite 5.4 1:1.6.0.14.0-1jpp.1.el6_4
  • java-1.5.0-ibm RHEL 5 EXTRAS 1:1.5.0.13.1-1jpp.1.el5
  • java-1.5.0-ibm RHEL 6 EXTRAS 1:1.5.0.13.1-1jpp.2.el6_2
  • java-1.5.0-ibm-src RHEL 5 EXTRAS 1:1.5.0.13.1-1jpp.1.el5
  • java-1.5.0-ibm-src RHEL 6 EXTRAS 1:1.5.0.13.1-1jpp.2.el6_2
  • java-1.5.0-ibm-demo RHEL 5 EXTRAS 1:1.5.0.13.1-1jpp.1.el5
  • java-1.5.0-ibm-demo RHEL 6 EXTRAS 1:1.5.0.13.1-1jpp.2.el6_2

red hat advisories RHSA-2013:1455RHSA-2012:0508RHSA-2012:0343RHSA-2012:0034RHSA-2012:0006RHSA-2011:1380

  • python SLE Module for Python 2 15 SP1, SLE Module for Desktop Applications 15 SP1, SLE Module for Desktop Applications 15 +2 more 2.7.17-7.32.2
  • python-base SLE Module for Python 2 15 SP1, SLE Module for Basesystem 15 SP1, SLE Module for Basesystem 15 2.7.17-7.32.1
  • python3 SLE Module for Basesystem 15 SP1, SLE Module for Basesystem 15 3.6.10-3.42.2
  • python3-base SLE Module for Development Tools 15 SP1, SLE Module for Development Tools 15, SLE Module for Basesystem 15 SP1 +1 more 3.6.10-3.42.2

suse advisories SUSE-SU-2020:0234-1SUSE-SU-2020:0114-1

  • python315 openSUSE Tumbleweed 3.15.0~a1-1.1
  • python314 openSUSE Tumbleweed 3.14.0~a1-1.1
  • python313 openSUSE Tumbleweed 3.13.0~b3-1.1
  • fetchmail openSUSE Tumbleweed 6.3.26-13.4
  • mozilla-nss openSUSE Tumbleweed 3.26.2-1.1
  • python-base openSUSE Tumbleweed 2.7.12-1.4
  • python openSUSE Tumbleweed 2.7.18-8.1
  • python310 openSUSE Tumbleweed 3.10.0rc1-4.2

opensuse advisories openSUSE-SU-2025:15713-1openSUSE-SU-2024:14434-1openSUSE-SU-2024:14109-1openSUSE-SU-2024:10194-1openSUSE-SU-2024:10451-1openSUSE-SU-2024:10536-1

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2011-3389 updated cvss 4.3

HTTPS: block-wise chosen-plaintext attack against SSL/TLS (BEAST)

  • Red Hat Enterprise Linux 4 nss, gnutls, openssl, openssl096b, java-1.5.0-ibm Red Hat Enterprise Linux 5 nss, gnutls, openssl097a Red Hat Enterprise Linux 6 nss, gnutls, openssl, nss-tools, nss-sysinit, openssl098e, +4 more
    affected: no fix available, no fix planned “Will not fix”
  • Red Hat Desktop version 4 Extras java-1.6.0-sun 1.6.0.29-1jpp.1.el4, java-1.6.0-ibm 1.6.0.10.0-1jpp.2.el4, java-1.4.2-ibm 1.4.2.13.11-1jpp.1.el4, java-1.6.0-sun-src 1.6.0.29-1jpp.1.el4, java-1.6.0-sun-demo 1.6.0.29-1jpp.1.el4, java-1.6.0-sun-jdbc 1.6.0.29-1jpp.1.el4, +11 more
    fixed: vendor fix RHSA-2012:0006
  • Red Hat Enterprise Linux (v. 5 server) java-1.6.0-openjdk 1.6.0.0-1.23.1.9.10.el5_7, java-1.6.0-openjdk-src 1.6.0.0-1.23.1.9.10.el5_7, java-1.6.0-openjdk-demo 1.6.0.0-1.23.1.9.10.el5_7, java-1.6.0-openjdk-javadoc 1.6.0.0-1.23.1.9.10.el5_7
    fixed: vendor fix RHSA-2011:1380
  • Red Hat Enterprise Linux AS version 4 Extras java-1.6.0-sun 1.6.0.29-1jpp.1.el4, java-1.6.0-ibm 1.6.0.10.0-1jpp.2.el4, java-1.4.2-ibm 1.4.2.13.11-1jpp.1.el4, java-1.6.0-sun-src 1.6.0.29-1jpp.1.el4, java-1.6.0-sun-demo 1.6.0.29-1jpp.1.el4, java-1.6.0-sun-jdbc 1.6.0.29-1jpp.1.el4, +11 more
    fixed: vendor fix RHSA-2012:0006
  • Red Hat Enterprise Linux Desktop (v. 5 client) java-1.6.0-openjdk 1.6.0.0-1.23.1.9.10.el5_7, java-1.6.0-openjdk-src 1.6.0.0-1.23.1.9.10.el5_7, java-1.6.0-openjdk-demo 1.6.0.0-1.23.1.9.10.el5_7, java-1.6.0-openjdk-javadoc 1.6.0.0-1.23.1.9.10.el5_7
    fixed: vendor fix RHSA-2011:1380
  • Red Hat Enterprise Linux Desktop Supplementary (v. 5) java-1.6.0-sun 1.6.0.29-1jpp.1.el5, java-1.5.0-ibm 1.5.0.13.1-1jpp.1.el5, java-1.6.0-ibm 1.6.0.10.0-1jpp.2.el5, java-1.4.2-ibm 1.4.2.13.11-1jpp.1.el5, java-1.6.0-sun-src 1.6.0.29-1jpp.1.el5, java-1.6.0-sun-demo 1.6.0.29-1jpp.1.el5, +19 more
    fixed: vendor fix RHSA-2012:0006
  • Red Hat Enterprise Linux Desktop Supplementary (v. 6) java-1.6.0-sun 1.6.0.29-1jpp.1.el6, java-1.6.0-ibm 1.6.0.10.0-1jpp.2.el6, java-1.5.0-ibm 1.5.0.13.1-1jpp.2.el6_2, java-1.6.0-sun-src 1.6.0.29-1jpp.1.el6, java-1.6.0-sun-demo 1.6.0.29-1jpp.1.el6, java-1.6.0-sun-jdbc 1.6.0.29-1jpp.1.el6, +11 more
    fixed: vendor fix RHSA-2012:0034
  • Red Hat Enterprise Linux ES version 4 Extras java-1.6.0-sun 1.6.0.29-1jpp.1.el4, java-1.6.0-ibm 1.6.0.10.0-1jpp.2.el4, java-1.4.2-ibm 1.4.2.13.11-1jpp.1.el4, java-1.6.0-sun-src 1.6.0.29-1jpp.1.el4, java-1.6.0-sun-demo 1.6.0.29-1jpp.1.el4, java-1.6.0-sun-jdbc 1.6.0.29-1jpp.1.el4, +11 more
    fixed: vendor fix RHSA-2012:0006
show 7 more
  • Red Hat Enterprise Linux HPC Node Supplementary (v. 6) java-1.6.0-sun 1.6.0.29-1jpp.1.el6, java-1.6.0-ibm 1.6.0.10.0-1jpp.2.el6, java-1.5.0-ibm 1.5.0.13.1-1jpp.2.el6_2, java-1.6.0-sun-src 1.6.0.29-1jpp.1.el6, java-1.6.0-sun-demo 1.6.0.29-1jpp.1.el6, java-1.6.0-ibm-src 1.6.0.10.0-1jpp.2.el6, +5 more
    fixed: vendor fix RHSA-2012:0034
  • Red Hat Enterprise Linux Server (v. 6) java-1.6.0-openjdk 1.6.0.0-1.40.1.9.10.el6_1, java-1.6.0-openjdk-javadoc 1.6.0.0-1.40.1.9.10.el6_1 Red Hat Enterprise Linux Server Optional (v. 6) java-1.6.0-openjdk 1.6.0.0-1.40.1.9.10.el6_1, java-1.6.0-openjdk-src 1.6.0.0-1.40.1.9.10.el6_1, java-1.6.0-openjdk-demo 1.6.0.0-1.40.1.9.10.el6_1
    fixed: vendor fix RHSA-2011:1380
  • Red Hat Enterprise Linux Server Supplementary (v. 5) java-1.6.0-sun 1.6.0.29-1jpp.1.el5, java-1.5.0-ibm 1.5.0.13.1-1jpp.1.el5, java-1.6.0-ibm 1.6.0.10.0-1jpp.2.el5, java-1.4.2-ibm 1.4.2.13.11-1jpp.1.el5, java-1.6.0-sun-src 1.6.0.29-1jpp.1.el5, java-1.6.0-sun-demo 1.6.0.29-1jpp.1.el5, +19 more
    fixed: vendor fix RHSA-2012:0006
  • Red Hat Enterprise Linux Server Supplementary (v. 6) java-1.6.0-sun 1.6.0.29-1jpp.1.el6, java-1.6.0-ibm 1.6.0.10.0-1jpp.2.el6, java-1.5.0-ibm 1.5.0.13.1-1jpp.2.el6_2, java-1.6.0-sun-src 1.6.0.29-1jpp.1.el6, java-1.6.0-sun-demo 1.6.0.29-1jpp.1.el6, java-1.6.0-sun-jdbc 1.6.0.29-1jpp.1.el6, +11 more Red Hat Enterprise Linux Workstation Supplementary (v. 6) java-1.6.0-sun 1.6.0.29-1jpp.1.el6, java-1.6.0-ibm 1.6.0.10.0-1jpp.2.el6, java-1.5.0-ibm 1.5.0.13.1-1jpp.2.el6_2, java-1.6.0-sun-src 1.6.0.29-1jpp.1.el6, java-1.6.0-sun-demo 1.6.0.29-1jpp.1.el6, java-1.6.0-sun-jdbc 1.6.0.29-1jpp.1.el6, +11 more
    fixed: vendor fix RHSA-2012:0034
  • Red Hat Enterprise Linux WS version 4 Extras java-1.6.0-sun 1.6.0.29-1jpp.1.el4, java-1.6.0-ibm 1.6.0.10.0-1jpp.2.el4, java-1.4.2-ibm 1.4.2.13.11-1jpp.1.el4, java-1.6.0-sun-src 1.6.0.29-1jpp.1.el4, java-1.6.0-sun-demo 1.6.0.29-1jpp.1.el4, java-1.6.0-sun-jdbc 1.6.0.29-1jpp.1.el4, +11 more
    fixed: vendor fix RHSA-2012:0006
  • Red Hat Satellite 5.4 (RHEL v.5) java-1.6.0-ibm 1.6.0.14.0-1jpp.1.el5_9 Red Hat Satellite 5.4 (RHEL v.6) java-1.6.0-ibm 1.6.0.14.0-1jpp.1.el6_4
    fixed: vendor fix RHSA-2013:1455
  • Red Hat RHEL 4 AS for SAP java-1.4.2-ibm-sap 1.4.2.13.11.sap-1jpp.1.el4, java-1.4.2-ibm-sap-src 1.4.2.13.11.sap-1jpp.1.el4, java-1.4.2-ibm-sap-demo 1.4.2.13.11.sap-1jpp.1.el4, java-1.4.2-ibm-sap-javacomm 1.4.2.13.11.sap-1jpp.1.el4 Red Hat RHEL 5 Server for SAP java-1.4.2-ibm-sap 1.4.2.13.11.sap-1jpp.1.el5, java-1.4.2-ibm-sap-src 1.4.2.13.11.sap-1jpp.1.el5, java-1.4.2-ibm-sap-demo 1.4.2.13.11.sap-1jpp.1.el5, java-1.4.2-ibm-sap-javacomm 1.4.2.13.11.sap-1jpp.1.el5
    fixed: vendor fix RHSA-2012:0343

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

cisa ICSA-14-098-03 updated cvss 4.3

Siemens Ruggedcom WIN Products BEAST Attack Vulnerability

  • Siemens WIN5100 <v4.4 Siemens WIN5200 <v4.4 Siemens WIN7000 <v4.4 Siemens WIN7200 <v4.4
    affected: mitigation “Siemens has provided a firmware update (Ruggedcom WIN v4.4) that supports the mitigation technique and recommends customers to update to this version (http://www.siemens.com/cert/advisories)”

From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf

cisa ICSA-19-192-04 updated cvss 5.9

ICSA-19-192-04 Siemens SIMATIC RF6XXR

Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf

cisa ICSMA-18-058-02 updated cvss 3.7

Philips Intellispace Portal ISP Vulnerabilities

  • Phillips IntelliSpace Portal 7.0.x Phillips IntelliSpace Portal 8.0.x
    affected: mitigation “Users with questions regarding their specific ISP installations are advised by Philips to contact their local Philips service support team or their regional service support.” usa.philips.com

From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf

Timeline

  1. Published
  2. First public exploit (Metasploit auxiliary/scanner/ssl/ssl_version)

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
partial
Assessed
31 d ago

Exploit prediction

73.33% chance of exploitation in the next 30 days, higher than 99.4% of all scored CVEs (FIRST EPSS, 2026-11-09).

Exploits and checks

CVSS scores

assigned by version score vector
NVD 2.0 4.3 AV:N/AC:M/Au:N/C:P/I:N/A:N

Classification

Weakness
  • CWE-326 Inadequate Encryption Strength
Technology feeds

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

CPEs and fixed versions use Anchore's correction of NVD's data: super old browser vulnerability needs to have versions added.