CVE-2015-4000 | BDVDB-2026-69528 Detail
Description#
The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle attackers to conduct cipher-downgrade attacks by rewriting a ClientHello with DHE replaced by DHE_EXPORT and then rewriting a ServerHello with DHE_EXPORT replaced by DHE, aka the "Logjam" issue.
Impact#
Per CVSS v3.1: confidentiality impact none, integrity impact low, availability impact none. Attack vector: network.
Weaknesses#
- CWE-295 Improper Certificate Validation
References#
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00001.html
- http://marc.info/?l=bugtraq&m=143880121627664&w=2
- http://rhn.redhat.com/errata/RHSA-2015-1243.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html
- http://www.securitytracker.com/id/1033208
- http://www.securitytracker.com/id/1032637
- http://marc.info/?l=bugtraq&m=144050121701297&w=2
- http://www.debian.org/security/2016/dsa-3688
- http://www.debian.org/security/2015/dsa-3287
- http://marc.info/?l=bugtraq&m=144493176821532&w=2
- http://www.securitytracker.com/id/1032865
- http://marc.info/?l=bugtraq&m=143557934009303&w=2
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html
- http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00026.html
Show all 40
- http://www.securitytracker.com/id/1034728
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00005.html
- http://www.securitytracker.com/id/1032656
- http://rhn.redhat.com/errata/RHSA-2016-2056.html
- http://openwall.com/lists/oss-security/2015/05/20/8
- http://lists.opensuse.org/opensuse-updates/2015-10/msg00011.html
- http://marc.info/?l=bugtraq&m=143628304012255&w=2
- http://marc.info/?l=bugtraq&m=144060576831314&w=2
- http://www.securitytracker.com/id/1032475
- http://www.securitytracker.com/id/1032960
- http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00037.html
- http://www.securitytracker.com/id/1032653
- http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00031.html
- http://www.securitytracker.com/id/1033385
- https://security.gentoo.org/glsa/201512-10
- http://rhn.redhat.com/errata/RHSA-2015-1229.html
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00097.html
- http://www.securitytracker.com/id/1032864
- http://www.securitytracker.com/id/1032910
- http://www.securitytracker.com/id/1032645
- http://www.ubuntu.com/usn/USN-2706-1
- https://security.gentoo.org/glsa/201701-46
- http://rhn.redhat.com/errata/RHSA-2015-1526.html
- http://www.securitytracker.com/id/1033760
- http://rhn.redhat.com/errata/RHSA-2015-1485.html
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.