CVEvulnerability

CVE-2015-0138

4.3 MEDIUM Published 2015-03-25 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2015-03-25
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
CWE-310

Description

GSKit in IBM Tivoli Directory Server (ITDS) 6.0 before 6.0.0.73-ISS-ITDS-IF0073, 6.1 before 6.1.0.66-ISS-ITDS-IF0066, 6.2 before 6.2.0.42-ISS-ITDS-IF0042, and 6.3 before 6.3.0.35-ISS-ITDS-IF0035 and IBM Security Directory Server (ISDS) 6.3.1 before 6.3.1.9-ISS-ISDS-IF0009 does not properly restrict TLS state transitions, which makes it easier for remote attackers to conduct cipher-downgrade attacks to EXPORT_RSA ciphers via crafted TLS traffic, related to the "FREAK" issue, a different vulnerability than CVE-2015-0204.

Affected configurations

• ibm tivoli directory server (<= 6.0.0.73) • ibm tivoli directory server 6.1.0 • ibm tivoli directory server 6.1.0.0 • ibm tivoli directory server 6.1.0.1 • ibm tivoli directory server 6.1.0.2 • ibm tivoli directory server 6.1.0.3 • ibm tivoli directory server 6.1.0.4 • ibm tivoli directory server 6.1.0.5 • ibm tivoli directory server 6.1.0.6 • ibm tivoli directory server 6.1.0.7 • ibm tivoli directory server 6.1.0.8 • ibm tivoli directory server 6.1.0.9 • ibm tivoli directory server 6.1.0.10 • ibm tivoli directory server 6.1.0.11 • ibm tivoli directory server 6.1.0.12 • ibm tivoli directory server 6.1.0.13 • ibm tivoli directory server 6.1.0.14 • ibm tivoli directory server 6.1.0.15 • ibm tivoli directory server 6.1.0.17 • ibm tivoli directory server 6.1.0.18 • ibm tivoli directory server 6.1.0.19 • ibm tivoli directory server 6.1.0.20 • ibm tivoli directory server 6.1.0.21 • ibm tivoli directory server 6.1.0.22 • ibm tivoli directory server 6.1.0.23 • ibm tivoli directory server 6.1.0.24 • ibm tivoli directory server 6.1.0.25 • ibm tivoli directory server 6.1.0.26 • ibm tivoli directory server 6.1.0.27 • ibm tivoli directory server 6.1.0.28 • ibm tivoli directory server 6.1.0.29 • ibm tivoli directory server 6.1.0.30 • ibm tivoli directory server 6.1.0.31 • ibm tivoli directory server 6.1.0.32 • ibm tivoli directory server 6.1.0.33 • ibm tivoli directory server 6.1.0.34 • ibm tivoli directory server 6.1.0.35 • ibm tivoli directory server 6.1.0.36 • ibm tivoli directory server 6.1.0.37 • ibm tivoli directory server 6.1.0.38 • ibm tivoli directory server 6.1.0.39 • ibm tivoli directory server 6.1.0.40 • ibm tivoli directory server 6.1.0.41 • ibm tivoli directory server 6.1.0.42 • ibm tivoli directory server 6.1.0.43 • ibm tivoli directory server 6.1.0.44 • ibm tivoli directory server 6.1.0.45 • ibm tivoli directory server 6.1.0.46 • ibm tivoli directory server 6.1.0.47 • ibm tivoli directory server 6.1.0.48 • ibm tivoli directory server 6.1.0.49 • ibm tivoli directory server 6.1.0.50 • ibm tivoli directory server 6.1.0.51 • ibm tivoli directory server 6.1.0.52 • ibm tivoli directory server 6.1.0.53 • ibm tivoli directory server 6.1.0.54 • ibm tivoli directory server 6.1.0.55 • ibm tivoli directory server 6.1.0.56 • ibm tivoli directory server 6.1.0.57 • ibm tivoli directory server 6.1.0.58 … and 80 more

Related

Weakness · not in database (1)

References