Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2012-2668
HistoryJun 17, 2012 - 12:00 a.m.

CVE-2012-2668

2012-06-1700:00:00
ubuntu.com
ubuntu.com
14

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

EPSS

0.007

Percentile

79.9%

JSON

libraries/libldap/tls_m.c in OpenLDAP, possibly 2.4.31 and earlier, when
using the Mozilla NSS backend, always uses the default cipher suite even
when TLSCipherSuite is set, which might cause OpenLDAP to use weaker
ciphers than intended and make it easier for remote attackers to obtain
sensitive information.

Notes

Author Note
mdeslaur we build with gnutls, not nss, so not-affected

Related

prion 1
openvas 13
centos 1
nvd 1
nessus 10
oraclelinux 1
fedora 2
veracode 1
amazon 1
redhat 2
cvelist 1
debiancve 1
cve 1
gentoo 1
apple 2
prion
prion
Default credentials
2012-06-17 03:41:00
openvas
openvas
CentOS Update for openldap CESA-2012:1151 centos6
2012-08-09 00:00:00
RedHat Update for openldap RHSA-2012:1151-01
2012-08-09 00:00:00
CentOS Update for openldap CESA-2012:1151 centos6
2012-08-09 00:00:00
centos
centos
openldap security update
2012-08-08 18:55:28
nvd
nvd
CVE-2012-2668
2012-06-17 03:41:41
nessus
nessus
Amazon Linux AMI : openldap (ALAS-2012-117)
2013-09-04 00:00:00
Oracle Linux 6 : openldap (ELSA-2012-1151)
2013-07-12 00:00:00
CentOS 6 : openldap (CESA-2012:1151)
2012-08-10 00:00:00
oraclelinux
oraclelinux
openldap security and bug fix update
2012-08-08 00:00:00
fedora
fedora
[SECURITY] Fedora 17 Update: openldap-2.4.31-3.fc17
2012-07-17 17:22:22
[SECURITY] Fedora 16 Update: openldap-2.4.26-8.fc16
2012-07-17 17:26:49
veracode
veracode
Weak Cipher Suite
2019-01-15 08:55:35
amazon
amazon
Low: openldap
2012-08-18 05:14:00
redhat
redhat
(RHSA-2012:1151) Low: openldap security and bug fix update
2012-08-08 00:00:00
(RHSA-2012:1200) Moderate: rhev-hypervisor6 security and bug fix update
2012-08-23 00:00:00
cvelist
cvelist
CVE-2012-2668
2012-06-17 01:00:00
debiancve
debiancve
CVE-2012-2668
2012-06-17 03:41:41
cve
cve
CVE-2012-2668
2012-06-17 03:41:41
gentoo
gentoo
OpenLDAP: Multiple vulnerabilities
2014-06-30 00:00:00
apple
apple
About the security content of macOS Catalina 10.15.2, Security Update 2019-002 Mojave, Security Update 2019-007 High Sierra
2019-12-10 00:00:00
About the security content of macOS Catalina 10.15.2, Security Update 2019-002 Mojave, Security Update 2019-007 High Sierra - Apple Support
2020-11-12 07:38:35

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

EPSS

0.007

Percentile

79.9%

JSON
Related for UB:CVE-2012-2668
prion1openvas13centos1nvd1nessus10oraclelinux1fedora2veracode1amazon1redhat2cvelist1debiancve1cve1gentoo1apple2