CVE-2008-7270
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 3.4%
OpenSSL before 0.9.8j, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the use of a disabled cipher via vectors involving sniffing network traffic to discover a session identifier, a different vulnerability than CVE-2010-4180.
Produtos afetados
n/a · n/aReferências
http://cvs.openssl.org/chngview?cn=17489http://marc.info/?l=bugtraq&m=132077688910227&w=2https://bugzilla.redhat.com/show_bug.cgi?id=659462http://secunia.com/advisories/42493http://ubuntu.com/usn/usn-1029-1http://www.redhat.com/support/errata/RHSA-2010-0977.htmlhttp://www.redhat.com/support/errata/RHSA-2010-0978.htmlhttp://www.redhat.com/support/errata/RHSA-2011-0896.htmlhttp://www.securityfocus.com/archive/1/522176http://www.securityfocus.com/bid/45254