CVE-2015-3230 | BDVDB-2026-72590 Detail

Description#

389 Directory Server (formerly Fedora Directory Server) before 1.3.3.12 does not enforce the nsSSL3Ciphers preference when creating an sslSocket, which allows remote attackers to have unspecified impact by requesting to use a disabled cipher.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://fedorahosted.org/389/ticket/48194
http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168985.html
https://bugzilla.redhat.com/show_bug.cgi?id=1230996
http://directory.fedoraproject.org/docs/389ds/releases/release-1-3-3-12.html

Exploit#

No public exploit known

History#

Version 12015-10-29Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.