The OpenSSL extension of Ruby (Git trunk) versions after 2011-09-01 up to 2011-11-03 always generated an exponent value of '1' to be used for private RSA key generation. A remote attacker could use this flaw to bypass or corrupt integrity of services, depending on strong private RSA keys generation mechanism.
We have discovered 490,155 live websites that are affected by CVE-2011-4121.
| Product | |
| Category | Web Server Extensions |
| Vulnerable Domains | 490,155 live websites (100% of OpenSSL install base) |
| Vulnerable Versions |
|
| Vulnerable Versions Count | 73 versions ( 100% of all versions) |
| 132,167 websites | |
| 41,559 websites | |
| 36,024 websites | |
| 32,475 websites | |
| 17,253 websites | |
| 16,740 websites | |
| 14,973 websites | |
| 14,209 websites | |
| 14,103 websites | |
| .com | 181,409 websites |
| .nl | 24,640 websites |
| .org | 24,093 websites |
| .net | 22,332 websites |
| .de | 19,604 websites |
| .cz | 13,639 websites |
| .jp | 13,079 websites |
| .ru | 12,358 websites |
| .it | 10,205 websites |
| .edu | 9,158 websites |
| Domain | Country | Rank | Contacts |
|---|---|---|---|
| *****.cz | *,*** | ||
| ********.com | *,*** | ||
| ***********.com | *,*** | ||
| ***.***********.com | *,*** | ||
| ****.com | *,*** | ||
| ********.com | *,*** | ||
| *******.com | *,*** | ||
| ****.*****.net | *,*** | ||
| *.******.***.***.br | *,*** | ||
| ****.org | *,*** |