Lucene search
Tenable5564.PRMHistoryJun 07, 2010 - 12:00 a.m.
OpenOffice < 3.2.1 Multiple Vulnerabilities
2010-06-0700:00:00
Tenable
www.tenable.com
149
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.062 Low
EPSS
Percentile
93.6%
The version of OpenOffice installed on the remote host is earlier than 3.2.1. Such version are affected by several issues :
-
There is a TLS/SSL renegotiation vulnerability in the included third-party OpenSSL library. (CVE-2009-3555)
-
There is a python scripting vulnerability which may lead to undesired code execution when using the OpenOffice scripting IDE. (CVE-2010-0395)
Binary data 5564.prm| Vendor | Product | Version | CPE |
|---|---|---|---|
| sun | openoffice.org | cpe:/a:sun:openoffice.org |
Related
nessus
nessus
Oracle OpenOffice.org < 3.2.1 Multiple Vulnerabilities
2010-06-07 00:00:00
Fedora 12 : openoffice.org-3.1.1-19.32.fc12 (2010-9576)
2010-07-01 00:00:00
openSUSE Security Update : OpenOffice_org (openSUSE-SU-2010:0386-1)
2010-07-19 00:00:00
centos
centos
openoffice.org security update
2010-06-15 16:14:36
openssl097a security update
2010-03-27 17:44:36
nspr, nss security update
2010-03-28 15:36:50
osv
osv
openoffice.org - arbitrary code execution
2010-06-05 00:00:00
Apache Tomcat affected by vulnerability in TLS and SSL protocol
2022-05-02 03:46:22
fedora
fedora
[SECURITY] Fedora 13 Update: openoffice.org-3.2.0-12.24.fc13
2010-06-07 22:26:51
[SECURITY] Fedora 12 Update: nss-util-3.12.5-1.fc12.1
2009-12-10 04:13:15
[SECURITY] Fedora 12 Update: proftpd-1.3.2c-1.fc12
2009-12-27 20:24:34
debian
debian
[Backports-security-announce] Security update for openoffice.org
2010-06-06 10:09:09
[Backports-security-announce] Security update for openoffice.org
2010-06-06 10:15:12
[Backports-security-announce] Security update for openoffice.org
2010-06-06 10:09:09
openvas
openvas
Ubuntu Update for openoffice.org vulnerability USN-949-1
2010-06-11 00:00:00
RedHat Update for openoffice.org RHSA-2010:0459-01
2010-06-11 00:00:00
CentOS Update for openoffice.org-base CESA-2010:0459 centos5 i386
2011-08-09 00:00:00
ubuntucve
ubuntucve
CVE-2010-0395
2010-06-08 00:00:00
CVE-2009-3555
2009-11-09 00:00:00
nvd
nvd
CVE-2010-0395
2010-06-10 00:30:07
CVE-2009-3555
2009-11-09 17:30:00
redhat
redhat
(RHSA-2010:0459) Moderate: openoffice.org security update
2010-06-07 00:00:00
(RHSA-2010:0164) Moderate: openssl097a security update
2010-03-25 00:00:00
(RHSA-2010:0155) Moderate: java-1.4.2-ibm security and bug fix update
2010-03-17 00:00:00
prion
prion
Code injection
2010-06-10 00:30:00
Cross site request forgery (csrf)
2009-11-09 17:30:00
cve
cve
CVE-2010-0395
2010-06-10 00:30:07
CVE-2009-3555
2009-11-09 17:30:00
cvelist
cvelist
CVE-2010-0395
2010-06-10 00:00:00
CVE-2009-3555
2009-11-09 17:00:00
ubuntu
ubuntu
OpenOffice.org vulnerability
2010-06-08 00:00:00
nss vulnerability
2010-06-29 00:00:00
NSS vulnerability
2010-07-23 00:00:00
veracode
veracode
Remote Code Execution (RCE)
2020-04-10 00:45:15
Man-in-the-Middle (MitM)
2020-04-10 00:36:56
securityvulns
securityvulns
SSL data injection
2010-02-10 00:00:00
[ MDVSA-2009:337 ] proftpd
2009-12-22 00:00:00
[ MDVSA-2009:295 ] apache
2009-11-09 00:00:00
fortinet
fortinet
FortiOS SSL Deep-Inspection possible Insecure Renegotiation
2017-11-03 00:00:00
seebug
seebug
TLS Renegotiation Vulnerability PoC Exploit
2009-12-21 00:00:00
ProFTPD TLS会话重协商明文数据注入漏洞
2009-12-15 00:00:00
cisco
cisco
Transport Layer Security Renegotiation Vulnerability
2009-11-09 13:00:00
oraclelinux
oraclelinux
openssl097a security update
2010-03-25 00:00:00
nss security update
2010-03-25 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package openssl1.1 version 0.9.8l-alt1
2009-11-07 00:00:00
Security fix for the ALT Linux 8 package openssl10 version 0.9.8l-alt1
2009-11-07 00:00:00
Security fix for the ALT Linux 6 package openssl10 version 0.9.8l-alt1
2009-11-07 00:00:00
slackware
slackware
openssl
2009-11-16 13:42:36
hackerone
hackerone
Slack: TLS1/SSLv3 Renegotiation Vulnerability
2014-04-02 13:01:00
LocalTapiola: Secure Client-Initiated Renegotiation
2017-12-27 15:57:52
mozilla
mozilla
Update NSS to support TLS renegotiation indication — Mozilla
2010-03-30 00:00:00
suse
suse
man-in-the-middle attack in openssl
2009-11-18 09:50:39
packetstorm
packetstorm
TLS Renegotiation Exploit
2009-12-21 00:00:00
f5
f5
K10737 : SSL Renegotiation vulnerability - CVE-2009-3555 / VU#120541
2013-07-05 00:00:00
SOL10737 - SSL Renegotiation vulnerability - CVE-2009-3555 / VU#120541
2009-11-05 00:00:00
openssl
openssl
Vulnerability in OpenSSL CVE-2009-3555
2009-11-05 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-09:15.ssl
2009-12-03 00:00:00
checkpoint_advisories
checkpoint_advisories
TLS Renegotiation (CVE-2009-3555)
2009-11-22 00:00:00
exploitpack
exploitpack
TLS - Renegotiation
2009-12-21 00:00:00
cert
cert
SSL and TLS protocols renegotiation vulnerability
2009-11-11 00:00:00
debiancve
debiancve
CVE-2009-3555
2009-11-09 17:30:00
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.062 Low
EPSS
Percentile
93.6%
Related for 5564.PRM