CVEvulnerability
CVE-2010-3173
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-10-21
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-310
Description
The SSL implementation in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 does not properly set the minimum key length for Diffie-Hellman Ephemeral (DHE) mode, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack.
Affected configurations
• mozilla firefox 3.6
• mozilla firefox 3.6.2
• mozilla firefox 3.6.3
• mozilla firefox 3.6.4
• mozilla firefox 3.6.6
• mozilla firefox 3.6.7
• mozilla firefox 3.6.8
• mozilla firefox 3.6.9
• mozilla firefox 3.6.10
• mozilla seamonkey (<= 2.0.8)
• mozilla seamonkey 1.0
• mozilla seamonkey 1.0.1
• mozilla seamonkey 1.0.2
• mozilla seamonkey 1.0.3
• mozilla seamonkey 1.0.4
• mozilla seamonkey 1.0.5
• mozilla seamonkey 1.0.6
• mozilla seamonkey 1.0.7
• mozilla seamonkey 1.0.8
• mozilla seamonkey 1.0.9
• mozilla seamonkey 1.1
• mozilla seamonkey 1.1.1
• mozilla seamonkey 1.1.2
• mozilla seamonkey 1.1.3
• mozilla seamonkey 1.1.4
• mozilla seamonkey 1.1.5
• mozilla seamonkey 1.1.6
• mozilla seamonkey 1.1.7
• mozilla seamonkey 1.1.8
• mozilla seamonkey 1.1.9
• mozilla seamonkey 1.1.10
• mozilla seamonkey 1.1.11
• mozilla seamonkey 1.1.12
• mozilla seamonkey 1.1.13
• mozilla seamonkey 1.1.14
• mozilla seamonkey 1.1.15
• mozilla seamonkey 1.1.16
• mozilla seamonkey 1.1.17
• mozilla seamonkey 1.1.18
• mozilla seamonkey 1.1.19
• mozilla seamonkey 1.5.0.8
• mozilla seamonkey 1.5.0.9
• mozilla seamonkey 1.5.0.10
• mozilla seamonkey 2.0
• mozilla seamonkey 2.0.1
• mozilla seamonkey 2.0.2
• mozilla seamonkey 2.0.3
• mozilla seamonkey 2.0.4
• mozilla seamonkey 2.0.5
• mozilla seamonkey 2.0.6
• mozilla seamonkey 2.0.7
• mozilla thunderbird (<= 3.0.8)
• mozilla thunderbird 0.1
• mozilla thunderbird 0.2
• mozilla thunderbird 0.3
• mozilla thunderbird 0.4
• mozilla thunderbird 0.5
• mozilla thunderbird 0.6
• mozilla thunderbird 0.7
• mozilla thunderbird 0.7.1
… and 146 more
Related
Weakness · not in database (1)
References
- http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox blogs.sun.com
- http://secunia.com/advisories/41839 secunia.com
- http://secunia.com/advisories/42867 secunia.com
- http://support.avaya.com/css/P8/documents/100114250 support.avaya.com
- http://support.avaya.com/css/P8/documents/100120156 support.avaya.com
- http://www.debian.org/security/2010/dsa-2123 www.debian.org
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:210 www.mandriva.com
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:211 www.mandriva.com
- http://www.mozilla.org/security/announce/2010/mfsa2010-72.html Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2010-0781.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2010-0782.html www.redhat.com
- http://www.ubuntu.com/usn/USN-1007-1 www.ubuntu.com
- http://www.vupen.com/english/advisories/2011/0061 www.vupen.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=554354 bugzilla.mozilla.org
- https://bugzilla.mozilla.org/show_bug.cgi?id=583337 bugzilla.mozilla.org
- https://bugzilla.mozilla.org/show_bug.cgi?id=587234 bugzilla.mozilla.org
- https://bugzilla.mozilla.org/show_bug.cgi?id=595300 bugzilla.mozilla.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12118 oval.cisecurity.org
- http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox blogs.sun.com
- http://secunia.com/advisories/41839 secunia.com
- http://secunia.com/advisories/42867 secunia.com
- http://support.avaya.com/css/P8/documents/100114250 support.avaya.com
- http://support.avaya.com/css/P8/documents/100120156 support.avaya.com
- http://www.debian.org/security/2010/dsa-2123 www.debian.org
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:210 www.mandriva.com
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:211 www.mandriva.com
- http://www.mozilla.org/security/announce/2010/mfsa2010-72.html Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2010-0781.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2010-0782.html www.redhat.com
- http://www.ubuntu.com/usn/USN-1007-1 www.ubuntu.com
- http://www.vupen.com/english/advisories/2011/0061 www.vupen.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=554354 bugzilla.mozilla.org
- https://bugzilla.mozilla.org/show_bug.cgi?id=583337 bugzilla.mozilla.org
- https://bugzilla.mozilla.org/show_bug.cgi?id=587234 bugzilla.mozilla.org
- https://bugzilla.mozilla.org/show_bug.cgi?id=595300 bugzilla.mozilla.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12118 oval.cisecurity.org