Описание
The SSL implementation in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 does not properly set the minimum key length for Diffie-Hellman Ephemeral (DHE) mode, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 4 | thunderbird | Affected | ||
| Red Hat Enterprise Linux 5 | thunderbird | Affected | ||
| Red Hat Enterprise Linux 6 | firefox | Affected | ||
| Red Hat Enterprise Linux 6 | thunderbird | Affected | ||
| Red Hat Enterprise Linux 3 | seamonkey | Fixed | RHSA-2010:0781 | 19.10.2010 |
| Red Hat Enterprise Linux 4 | seamonkey | Fixed | RHSA-2010:0781 | 19.10.2010 |
| Red Hat Enterprise Linux 4 | firefox | Fixed | RHSA-2010:0782 | 19.10.2010 |
| Red Hat Enterprise Linux 4 | nss | Fixed | RHSA-2010:0782 | 19.10.2010 |
| Red Hat Enterprise Linux 5 | firefox | Fixed | RHSA-2010:0782 | 19.10.2010 |
| Red Hat Enterprise Linux 5 | nss | Fixed | RHSA-2010:0782 | 19.10.2010 |
Показывать по
Дополнительная информация
Статус:
EPSS
5.1 Medium
CVSS2
Связанные уязвимости
The SSL implementation in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 does not properly set the minimum key length for Diffie-Hellman Ephemeral (DHE) mode, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack.
The SSL implementation in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 does not properly set the minimum key length for Diffie-Hellman Ephemeral (DHE) mode, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack.
The SSL implementation in Mozilla Firefox before 3.5.14 and 3.6.x befo ...
The SSL implementation in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 does not properly set the minimum key length for Diffie-Hellman Ephemeral (DHE) mode, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack.
Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации
EPSS
5.1 Medium
CVSS2