Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2008-7270HistoryDec 06, 2010 - 10:30 p.m.
CVE-2008-7270
2010-12-0622:30:00
Debian Security Bug Tracker
security-tracker.debian.org
16
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.008 Low
EPSS
Percentile
81.4%
OpenSSL before 0.9.8j, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the use of a disabled cipher via vectors involving sniffing network traffic to discover a session identifier, a different vulnerability than CVE-2010-4180.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | openssl | < 0.9.8k-1 | openssl_0.9.8k-1_all.deb |
| Debian | 11 | all | openssl | < 0.9.8k-1 | openssl_0.9.8k-1_all.deb |
| Debian | 10 | all | openssl | < 0.9.8k-1 | openssl_0.9.8k-1_all.deb |
| Debian | 999 | all | openssl | < 0.9.8k-1 | openssl_0.9.8k-1_all.deb |
| Debian | 13 | all | openssl | < 0.9.8k-1 | openssl_0.9.8k-1_all.deb |
Related
prion
prion
Session fixation
2010-12-06 22:30:00
Session fixation
2010-12-06 21:05:00
nessus
nessus
RHEL 5 : openssl (RHSA-2010:0978)
2010-12-14 00:00:00
CentOS 5 : openssl (CESA-2010:0978)
2010-12-14 00:00:00
Oracle Linux 5 : openssl (ELSA-2010-0978)
2013-07-12 00:00:00
openvas
openvas
RedHat Update for openssl RHSA-2010:0978-01
2010-12-28 00:00:00
CentOS Update for openssl CESA-2010:0978 centos5 i386
2011-08-09 00:00:00
Ubuntu Update for openssl vulnerabilities USN-1029-1
2010-12-23 00:00:00
centos
centos
openssl security update
2010-12-14 01:19:08
openssl security update
2011-01-27 09:11:13
f5
f5
K12853 : OpenSSL vulnerability CVE-2008-7270
2013-09-04 00:00:00
SOL12853 - OpenSSL vulnerability CVE-2008-7270
2011-05-24 00:00:00
SOL12543 - OpenSSL vulnerability CVE-2010-4180
2011-01-26 00:00:00
redhat
redhat
(RHSA-2010:0978) Moderate: openssl security update
2010-12-13 00:00:00
(RHSA-2010:0977) Moderate: openssl security update
2010-12-13 00:00:00
(RHSA-2010:0979) Moderate: openssl security update
2010-12-13 00:00:00
oraclelinux
oraclelinux
openssl security update
2010-12-13 00:00:00
openssl security update
2010-12-13 00:00:00
openssl security update
2011-02-10 00:00:00
ubuntu
ubuntu
OpenSSL vulnerabilities
2010-12-08 00:00:00
securityvulns
securityvulns
[USN-1029-1] OpenSSL vulnerabilities
2010-12-09 00:00:00
OpenSSL protection level downgrade
2010-12-09 00:00:00
cve
cve
CVE-2008-7270
2010-12-06 22:30:00
CVE-2010-4180
2010-12-06 21:05:00
ubuntucve
ubuntucve
CVE-2008-7270
2010-12-06 00:00:00
CVE-2010-4180
2010-12-06 00:00:00
veracode
veracode
Insecure TLS Configuration
2020-04-10 00:56:25
Insecure TLS Configuration
2020-04-10 00:56:26
debiancve
debiancve
CVE-2010-4180
2010-12-06 21:05:00
openssl
openssl
Vulnerability in OpenSSL CVE-2010-4180
2010-12-02 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package openssl10 version 1.0.0c-alt1
2011-02-01 00:00:00
Security fix for the ALT Linux 8 package openssl10 version 1.0.0c-alt1
2011-02-01 00:00:00
Security fix for the ALT Linux 9 package openssl1.1 version 1.0.0c-alt1
2011-02-01 00:00:00
slackware
slackware
[slackware-security] openssl
2010-12-07 07:14:58
osv
osv
openssl - protocol design flaw
2011-01-06 00:00:00
nss - protocol design flaw
2011-01-06 00:00:00
fedora
fedora
[SECURITY] Fedora 14 Update: openssl-1.0.0c-1.fc14
2010-12-10 20:26:33
[SECURITY] Fedora 14 Update: openssl-1.0.0d-1.fc14
2011-02-14 20:28:21
[SECURITY] Fedora 13 Update: openssl-1.0.0c-1.fc13
2010-12-17 08:35:37
debian
debian
[SECURITY] [DSA-2141-1] New openssl packages fix protocol design flaw
2011-01-05 23:18:09
[SECURITY] [DSA-2141-1] New openssl packages fix protocol design flaw
2011-01-05 23:18:09
suse
suse
Security update for compat-openssl097g (important)
2011-07-27 17:08:16
compat-openssl097g (important)
2011-07-27 16:08:25
cert
cert
gentoo
gentoo
OpenSSL: Multiple vulnerabilities
2011-10-09 00:00:00
ibm
ibm
lenovo
lenovo
Intel® PROSet/Wireless WiFi Software Vulnerabilities - Lenovo Support US
2018-11-13 17:10:51
Intel® PROSet/Wireless WiFi Software Vulnerabilities - US
2018-11-13 17:10:51
vmware
vmware
VMware third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX
2011-10-27 00:00:00
VMware third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX
2011-10-27 00:00:00
VMware vSphere and vCOps updates to third party libraries
2012-08-30 00:00:00
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.008 Low
EPSS
Percentile
81.4%
Related for DEBIANCVE:CVE-2008-7270