CVEvulnerability
CVE-2015-3230
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2015-10-29
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-254
Description
389 Directory Server (formerly Fedora Directory Server) before 1.3.3.12 does not enforce the nsSSL3Ciphers preference when creating an sslSocket, which allows remote attackers to have unspecified impact by requesting to use a disabled cipher.
Affected configurations
• fedoraproject 389 directory server (<= 1.3.3.10)
Related
Weakness · not in database (1)
References
- http://directory.fedoraproject.org/docs/389ds/releases/release-1-3-3-12.html Patch, Vendor Advisory
- http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168985.html lists.fedoraproject.org
- https://bugzilla.redhat.com/show_bug.cgi?id=1230996 bugzilla.redhat.com
- https://fedorahosted.org/389/ticket/48194 fedorahosted.org
- http://directory.fedoraproject.org/docs/389ds/releases/release-1-3-3-12.html Patch, Vendor Advisory
- http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168985.html lists.fedoraproject.org
- https://bugzilla.redhat.com/show_bug.cgi?id=1230996 bugzilla.redhat.com
- https://fedorahosted.org/389/ticket/48194 fedorahosted.org