Secunia
Login
|
|
CVE Reference: CVE-2008-7270 |
|
| NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. | |
|
Original Page at CVE MITRE: CVE-2008-7270 |
|
|
Description: OpenSSL before 0.9.8j, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the use of a disabled cipher via vectors involving sniffing network traffic to discover a session identifier, a different vulnerability than CVE-2010-4180. |
|
|
CVE Status: Candidate |
|
|
References: UBUNTU http://ubuntu.com/usn/usn-1029-1 SAID Secunia Advisory: SA42493 REDHAT http://www.redhat.com/support/errata/RHSA-2010-0977.html http://www.redhat.com/support/errata/RHSA-2010-0978.html http://www.redhat.com/support/errata/RHSA-2011-0896.html HP http://www.securityfocus.com/archive/1/522176 http://marc.info/?l=bugtraq&m=132077688910227&w=2 CONFIRM http://cvs.openssl.org/chngview?cn=17489 BID 45254 |
|
| Return to the previous page. |
