Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
mageiaGentoo FoundationMGASA-2014-0489
HistoryNov 26, 2014 - 8:29 p.m.

Updated ruby-httpclient package enables SSL negotiation

2014-11-2620:29:06
Gentoo Foundation
advisories.mageia.org
29

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

3.4 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N

0.975 High

EPSS

Percentile

100.0%

JSON

This new version enables SSL negotiation instead of hardcoding SSLv3.

Related

nessus 53
cert 1
openvas 22
fedora 18
ibm 85
veracode 1
cvelist 1
seebug 1
citrix 1
osv 1
redhat 2
amazon 2
f5 1
hackerone 1
virtuozzo 1
checkpoint_advisories 1
cve 1
debian 2
arista 1
centos 1
suse 1
cisco 1
nessus
nessus
Cisco Wireless LAN Controllers 5500 Series (POODLE)
2014-12-03 00:00:00
SuSE 11.3 Security Update : suseRegister (SAT Patch Number 10008)
2015-01-06 00:00:00
Fedora 20 : libuv-0.10.29-1.fc20 / nodejs-0.10.33-1.fc20 (2014-15379) (POODLE)
2014-12-15 00:00:00
cert
cert
POODLE vulnerability in SSL 3.0
2014-10-17 00:00:00
openvas
openvas
Fedora Update for nodejs FEDORA-2014-15379
2014-12-15 00:00:00
Fedora Update for python-rhsm FEDORA-2014-13781
2014-11-07 00:00:00
SUSE: Security Advisory for suseRegister (SUSE-SU-2015:0010-1)
2015-10-13 00:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: python-rhsm-1.13.6-1.fc21
2014-11-10 06:34:40
[SECURITY] Fedora 21 Update: libetpan-1.6-1.fc21
2014-11-10 06:34:14
[SECURITY] Fedora 20 Update: claws-mail-plugins-3.11.1-1.fc20
2014-11-10 06:30:28
ibm
ibm
Security Bulletin: Vulnerability in SSLv3 affects TS3310 (CVE-2014-3566)
2018-06-18 00:08:53
Security Bulletin: Vulnerability in SSLv3 affects IBM i (CVE-2014-3566)
2019-12-18 14:26:38
Security Bulletin: Vulnerability in SSLv3 affects Rational DOORS Web Access (CVE-2014-3566)
2020-05-01 08:19:24
veracode
veracode
Information Disclosure
2017-02-07 00:05:45
cvelist
cvelist
CVE-2014-3566
2014-10-15 00:00:00
seebug
seebug
SSL 3.0 POODLE（CVE-2014-3566）
2017-02-17 00:00:00
citrix
citrix
CVE-2014-3566 - Citrix Security Advisory for SSLv3 Protocol Flaw
2014-10-14 04:00:00
osv
osv
lighttpd - security update
2015-07-25 00:00:00
redhat
redhat
(RHSA-2015:1546) Important: node.js security update
2015-08-04 00:00:00
(RHSA-2014:1653) Moderate: openssl security update
2014-10-16 00:00:00
amazon
amazon
Important: openssl
2014-10-14 22:32:00
Important: nss
2014-10-16 22:14:00
f5
f5
K15702 : SSLv3 vulnerability CVE-2014-3566
2015-09-18 00:00:00
hackerone
hackerone
New Relic: SSL Padding Oracle On Downgraded Legacy Encryption (POODLE) Vulnerability
2017-03-26 19:08:23
virtuozzo
virtuozzo
Important product update: Virtuozzo PowerPanel RTM Hotfix 3 (7.0.1-415)
2017-09-20 00:00:00
checkpoint_advisories
checkpoint_advisories
Secure Socket Layer (SSL) Version 3.0 (CVE-2014-3566)
2014-10-15 00:00:00
cve
cve
CVE-2014-3566
2014-10-15 00:55:02
debian
debian
[SECURITY] [DLA 282-1] lighttpd security update
2015-07-25 14:29:15
[SECURITY] [DSA 3489-1] lighttpd security update
2016-02-23 18:26:27
arista
arista
Security Advisory 0007
2014-10-20 00:00:00
centos
centos
openssl security update
2014-10-16 15:21:39
suse
suse
Security update for suseRegister (important)
2015-01-05 21:04:43
cisco
cisco
SSL Padding Oracle On Downgraded Legacy Encryption (POODLE) Vulnerability
2014-10-15 18:30:00

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

3.4 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N

0.975 High

EPSS

Percentile

100.0%

JSON
Related for MGASA-2014-0489
nessus53cert1openvas22fedora18ibm85veracode1cvelist1seebug1citrix1osv1redhat2amazon2f51hackerone1virtuozzo1checkpoint_advisories1cve1debian2arista1centos1suse1cisco1