CVE-2005-4839
UnknownEPSS 0.55%
Last modified
CVE-2005-4839 is a vulnerability of currently unknown severity. PureTLS before 0.9b5 does not clear optional Extensions and Algorithm.Parameters values before parsing, which might trigger an information leak of values from earlier certificates.. EPSS estimates a 0.55% chance of exploitation in the next 30 days.
Description
PureTLS before 0.9b5 does not clear optional Extensions and Algorithm.Parameters values before parsing, which might trigger an information leak of values from earlier certificates.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Claymore Systems Inc | Puretls | <= 0.9b4 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2005-4839?
PureTLS before 0.9b5 does not clear optional Extensions and Algorithm.Parameters values before parsing, which might trigger an information leak of values from earlier certificates.
How severe is CVE-2005-4839?
Severity scoring for CVE-2005-4839 is pending analysis. The EPSS model estimates a 0.55% probability of exploitation in the next 30 days.
How do I fix CVE-2005-4839?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2005
- CVE-2005-4833IBM WebSphere Application Server (WAS) 6.0 before 20050201, …
- CVE-2005-4834IBM WebSphere Application Server (WAS) 5.0.2.5 through 5.1.1…
- CVE-2005-4835The ath_rate_sample function in the ath_rate/sample/sample.c…
- CVE-2005-4836The HTTP/1.1 connector in Apache Tomcat 4.1.15 through 4.1.4…
- CVE-2005-4837snmp_api.c in snmpd in Net-SNMP 5.2.x before 5.2.2, 5.1.x be…
- CVE-2005-4838Multiple cross-site scripting (XSS) vulnerabilities in the e…
- CVE-2005-4840The Outlook Express Address Book control, when using Interne…
- CVE-2005-4841The Outlook Progress Ctl control allows remote attackers to …
- CVE-2005-4842The System Monitor Source Properties control allows remote a…
- CVE-2005-4843The SmartConnect Class control allows remote attackers to ca…
- CVE-2005-4844The CLSID_ApprenticeICW control allows remote attackers to c…
- CVE-2005-4845The Java Plug-in 1.4.2_03 and 1.4.2_04 controls, and the 1.4…
Are you affected by CVE-2005-4839?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST