Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2010-3173HistoryOct 21, 2010 - 7:00 p.m.
CVE-2010-3173
2010-10-2119:00:02
Debian Security Bug Tracker
security-tracker.debian.org
19
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS
0.009
Percentile
82.8%
The SSL implementation in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 does not properly set the minimum key length for Diffie-Hellman Ephemeral (DHE) mode, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | nss | < 3.12.8-1 | nss_3.12.8-1_all.deb |
| Debian | 11 | all | nss | < 3.12.8-1 | nss_3.12.8-1_all.deb |
| Debian | 999 | all | nss | < 3.12.8-1 | nss_3.12.8-1_all.deb |
| Debian | 13 | all | nss | < 3.12.8-1 | nss_3.12.8-1_all.deb |
Related
cve
cve
CVE-2010-3173
2010-10-21 19:00:02
ubuntucve
ubuntucve
CVE-2010-3173
2010-10-20 00:00:00
prion
prion
Design/Logic Flaw
2010-10-21 19:00:00
cvelist
cvelist
CVE-2010-3173
2010-10-21 18:12:00
veracode
veracode
Insecure TLS Configuration
2020-04-10 00:53:00
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2010-72
2010-10-23 00:00:00
mozilla
mozilla
Insecure Diffie-Hellman key exchange — Mozilla
2010-10-19 00:00:00
nvd
nvd
CVE-2010-3173
2010-10-21 19:00:02
openvas
openvas
Debian Security Advisory DSA 2123-1 (nss)
2010-11-17 00:00:00
Ubuntu: Security Advisory (USN-1007-1)
2010-10-22 00:00:00
Debian: Security Advisory (DSA-2123-1)
2010-11-17 00:00:00
ubuntu
ubuntu
NSS vulnerabilities
2010-10-20 00:00:00
debian
debian
BSA-009 Security Update for nss
2010-11-02 15:06:03
BSA-009 Security Update for nss
2010-11-02 19:04:18
[SECURITY] [DSA 2123-1] New NSS packages fix cryptographic weaknesses
2010-11-01 19:45:41
osv
osv
nss - cryptographic weaknesses
2010-11-01 00:00:00
nessus
nessus
Debian DSA-2123-1 : nss - several vulnerabilities
2010-11-03 00:00:00
Ubuntu 8.04 LTS / 9.04 / 9.10 / 10.04 LTS / 10.10 : nss vulnerabilities (USN-1007-1)
2010-10-21 00:00:00
CentOS 3 / 4 : seamonkey (CESA-2010:0781)
2010-11-24 00:00:00
oraclelinux
oraclelinux
seamonkey security update
2010-10-20 00:00:00
firefox security update
2010-10-20 00:00:00
redhat
redhat
(RHSA-2010:0781) Critical: seamonkey security update
2010-10-19 00:00:00
(RHSA-2010:0782) Critical: firefox security update
2010-10-19 00:00:00
centos
centos
seamonkey security update
2010-10-25 12:12:58
firefox, nss, xulrunner security update
2010-10-20 14:29:05
freebsd
freebsd
mozilla -- multiple vulnerabilities
2010-10-19 00:00:00
vmware
vmware
suse
suse
Firefox update to 31.1esr (important)
2014-09-09 18:04:16
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS
0.009
Percentile
82.8%
Related for DEBIANCVE:CVE-2010-3173