Lucene search
OpenSSLOPENSSL:CVE-2009-3555HistoryNov 05, 2009 - 12:00 a.m.
Vulnerability in OpenSSL CVE-2009-3555
2009-11-0500:00:00
www.openssl.org
48
5.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:P/A:P
6.6 Medium
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
69.4%
Implement RFC5746 to address vulnerabilities in SSL/TLS renegotiation.
- Fixed in OpenSSL 0.9.8m (Affected since 0.9.8)
Related
oraclelinux
oraclelinux
openssl097a security update
2010-03-25 00:00:00
nss security update
2010-03-25 00:00:00
nessus
nessus
Ubuntu 9.04 : nss vulnerability (USN-927-6)
2010-07-26 00:00:00
Fedora 12 : nss-3.12.6-1.2.fc12 (2010-3956)
2010-07-01 00:00:00
Oracle Linux 4 / 5 : nss (ELSA-2010-0165)
2013-07-12 00:00:00
openvas
openvas
Fedora Update for gnutls FEDORA-2010-9518
2010-06-25 00:00:00
Mandriva Update for mandriva-release MDVA-2010:069 (mandriva-release)
2010-02-19 00:00:00
Ubuntu Update for nspr update USN-927-5
2010-07-02 00:00:00
hackerone
hackerone
Slack: TLS1/SSLv3 Renegotiation Vulnerability
2014-04-02 13:01:00
LocalTapiola: Secure Client-Initiated Renegotiation
2017-12-27 15:57:52
centos
centos
nspr, nss security update
2010-03-28 15:36:50
openssl097a security update
2010-03-27 17:44:36
seebug
seebug
TLS Renegotiation Vulnerability PoC Exploit
2009-12-21 00:00:00
ProFTPD TLS会话重协商明文数据注入漏洞
2009-12-15 00:00:00
ubuntu
ubuntu
NSS vulnerability
2010-04-09 00:00:00
NSS vulnerability
2010-07-23 00:00:00
nss vulnerability
2010-06-29 00:00:00
debian
debian
[SECURITY] [DSA-2141-2] New nss packages fix protocol design flaw
2011-01-05 23:20:31
[SECURITY] [DSA-2141-4] New lighttpd packages fix regression
2011-01-12 18:51:18
fedora
fedora
[SECURITY] Fedora 12 Update: tomcat-native-1.1.18-1.fc12
2009-12-18 04:35:37
[SECURITY] Fedora 12 Update: proftpd-1.3.2c-1.fc12
2009-12-27 20:24:34
[SECURITY] Fedora 11 Update: nss-3.12.6-1.2.fc11
2010-03-23 02:03:18
cisco
cisco
Transport Layer Security Renegotiation Vulnerability
2009-11-09 13:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package openssl1.1 version 0.9.8l-alt1
2009-11-07 00:00:00
Security fix for the ALT Linux 6 package openssl10 version 0.9.8l-alt1
2009-11-07 00:00:00
Security fix for the ALT Linux 9 package openssl10 version 0.9.8l-alt1
2009-11-07 00:00:00
nvd
nvd
CVE-2009-3555
2009-11-09 17:30:00
slackware
slackware
openssl
2009-11-16 13:42:36
f5
f5
SOL10737 - SSL Renegotiation vulnerability - CVE-2009-3555 / VU#120541
2009-11-05 00:00:00
K10737 : SSL Renegotiation vulnerability - CVE-2009-3555 / VU#120541
2013-07-05 00:00:00
redhat
redhat
(RHSA-2010:0165) Moderate: nss security update
2010-03-25 00:00:00
(RHSA-2010:0155) Moderate: java-1.4.2-ibm security and bug fix update
2010-03-17 00:00:00
(RHSA-2010:0164) Moderate: openssl097a security update
2010-03-25 00:00:00
cert
cert
SSL and TLS protocols renegotiation vulnerability
2009-11-11 00:00:00
packetstorm
packetstorm
TLS Renegotiation Exploit
2009-12-21 00:00:00
ubuntucve
ubuntucve
CVE-2009-3555
2009-11-09 00:00:00
debiancve
debiancve
CVE-2009-3555
2009-11-09 17:30:00
securityvulns
securityvulns
Aruba Advisory ID: AID-020810 TLS Protocol Session Renegotiation Security Vulnerability
2010-02-10 00:00:00
SSL data injection
2010-02-10 00:00:00
[ MDVSA-2009:295 ] apache
2009-11-09 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-09:15.ssl
2009-12-03 00:00:00
prion
prion
Cross site request forgery (csrf)
2009-11-09 17:30:00
osv
osv
Apache Tomcat affected by vulnerability in TLS and SSL protocol
2022-05-02 03:46:22
checkpoint_advisories
checkpoint_advisories
TLS Renegotiation (CVE-2009-3555)
2009-11-22 00:00:00
TLS Client Initiated Renegotiation (CVE-2009-3555)
2009-11-23 00:00:00
Preemptive Protection against TLS and SSL Spoofing Vulnerability
2010-02-09 00:00:00
exploitpack
exploitpack
TLS - Renegotiation
2009-12-21 00:00:00
fortinet
fortinet
FortiOS SSL Deep-Inspection possible Insecure Renegotiation
2017-11-03 00:00:00
veracode
veracode
Man-in-the-Middle (MitM)
2020-04-10 00:36:56
cvelist
cvelist
CVE-2009-3555
2009-11-09 17:00:00
cve
cve
CVE-2009-3555
2009-11-09 17:30:00
suse
suse
man-in-the-middle attack in openssl
2009-11-18 09:50:39
mozilla
mozilla
Update NSS to support TLS renegotiation indication — Mozilla
2010-03-30 00:00:00
nginx
nginx
The renegotiation vulnerability in SSL protocol
2009-11-09 17:30:00
ibm
ibm
github
github
Apache Tomcat affected by vulnerability in TLS and SSL protocol
2022-05-02 03:46:22
5.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:P/A:P
6.6 Medium
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
69.4%
Related for OPENSSL:CVE-2009-3555