Lucene search
FortiGuard LabsFG-IR-17-137HistoryNov 03, 2017 - 12:00 a.m.
FortiOS SSL Deep-Inspection possible Insecure Renegotiation
2017-11-0300:00:00
FortiGuard Labs
www.fortiguard.com
50
5.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:P/A:P
0.002 Low
EPSS
Percentile
61.4%
FortiOS SSL Deep-Inspection may enable insecure renegotiation between TLS clients and servers that support secure renegotiation, opening the door to potential Man-in-the-Middle attacks (CVE-2009-3555) against the TLS connection, where an attacker could inject arbitrary data in the connection (without however being able to decipher it).
Related
nessus
nessus
Fedora 12 : tomcat-native-1.1.18-1.fc12 (2009-12229)
2009-12-18 00:00:00
Ubuntu 8.04 LTS : nss vulnerability (USN-927-4)
2010-06-30 00:00:00
Fedora 12 : nss-3.12.5-8.fc12 (2010-1127)
2010-07-01 00:00:00
openvas
openvas
CentOS Update for nspr CESA-2010:0165 centos4 i386
2010-03-31 00:00:00
Fedora Core 12 FEDORA-2009-12968 (nss-util)
2009-12-14 00:00:00
SLES9: Security update for OpenSSL
2009-11-23 00:00:00
fedora
fedora
[SECURITY] Fedora 12 Update: nss-3.12.6-1.2.fc12
2010-03-12 04:18:37
[SECURITY] Fedora 12 Update: gnutls-2.8.6-2.fc12
2010-06-25 18:15:19
[SECURITY] Fedora 12 Update: nss-util-3.12.5-1.fc12.1
2009-12-10 04:13:15
altlinux
altlinux
Security fix for the ALT Linux 8 package openssl10 version 0.9.8l-alt1
2009-11-07 00:00:00
Security fix for the ALT Linux 9 package openssl1.1 version 0.9.8l-alt1
2009-11-07 00:00:00
Security fix for the ALT Linux 9 package openssl10 version 0.9.8l-alt1
2009-11-07 00:00:00
redhat
redhat
(RHSA-2010:0164) Moderate: openssl097a security update
2010-03-25 00:00:00
(RHSA-2010:0155) Moderate: java-1.4.2-ibm security and bug fix update
2010-03-17 00:00:00
(RHSA-2010:0165) Moderate: nss security update
2010-03-25 00:00:00
seebug
seebug
ProFTPD TLS会话重协商明文数据注入漏洞
2009-12-15 00:00:00
TLS Renegotiation Vulnerability PoC Exploit
2009-12-21 00:00:00
suse
suse
man-in-the-middle attack in openssl
2009-11-18 09:50:39
securityvulns
securityvulns
[ MDVSA-2009:337 ] proftpd
2009-12-22 00:00:00
[ MDVSA-2009:295 ] apache
2009-11-09 00:00:00
debian
debian
[SECURITY] [DSA-2141-2] New nss packages fix protocol design flaw
2011-01-05 23:20:31
[SECURITY] [DSA-2141-4] New lighttpd packages fix regression
2011-01-12 18:51:18
cve
cve
CVE-2009-3555
2009-11-09 17:30:00
mozilla
mozilla
Update NSS to support TLS renegotiation indication — Mozilla
2010-03-30 00:00:00
hackerone
hackerone
LocalTapiola: Secure Client-Initiated Renegotiation
2017-12-27 15:57:52
Slack: TLS1/SSLv3 Renegotiation Vulnerability
2014-04-02 13:01:00
ubuntu
ubuntu
Apache vulnerability
2010-09-21 00:00:00
NSS vulnerability
2010-07-23 00:00:00
nss vulnerability
2010-06-29 00:00:00
veracode
veracode
Man-in-the-Middle (MitM)
2020-04-10 00:36:56
slackware
slackware
openssl
2009-11-16 13:42:36
oraclelinux
oraclelinux
openssl097a security update
2010-03-25 00:00:00
nss security update
2010-03-25 00:00:00
centos
centos
nspr, nss security update
2010-03-28 15:36:50
openssl097a security update
2010-03-27 17:44:36
cisco
cisco
Transport Layer Security Renegotiation Vulnerability
2009-11-09 13:00:00
checkpoint_advisories
checkpoint_advisories
TLS Renegotiation (CVE-2009-3555)
2009-11-22 00:00:00
Preemptive Protection against TLS and SSL Spoofing Vulnerability
2010-02-09 00:00:00
TLS Client Initiated Renegotiation (CVE-2009-3555)
2009-11-23 00:00:00
prion
prion
Cross site request forgery (csrf)
2009-11-09 17:30:00
packetstorm
packetstorm
TLS Renegotiation Exploit
2009-12-21 00:00:00
exploitpack
exploitpack
TLS - Renegotiation
2009-12-21 00:00:00
f5
f5
SOL10737 - SSL Renegotiation vulnerability - CVE-2009-3555 / VU#120541
2009-11-05 00:00:00
K10737 : SSL Renegotiation vulnerability - CVE-2009-3555 / VU#120541
2013-07-05 00:00:00
cert
cert
SSL and TLS protocols renegotiation vulnerability
2009-11-11 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-09:15.ssl
2009-12-03 00:00:00
osv
osv
Apache Tomcat affected by vulnerability in TLS and SSL protocol
2022-05-02 03:46:22
openssl
openssl
Vulnerability in OpenSSL CVE-2009-3555
2009-11-05 00:00:00
ubuntucve
ubuntucve
CVE-2009-3555
2009-11-09 00:00:00
debiancve
debiancve
CVE-2009-3555
2009-11-09 17:30:00
ibm
ibm
nginx
nginx
The renegotiation vulnerability in SSL protocol
2009-11-09 17:30:00
github
github
Apache Tomcat affected by vulnerability in TLS and SSL protocol
2022-05-02 03:46:22
exploitdb
exploitdb
TLS - Renegotiation
2009-12-21 00:00:00
5.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:P/A:P
0.002 Low
EPSS
Percentile
61.4%
Related for FG-IR-17-137