Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2010-4180
HistoryDec 06, 2010 - 12:00 a.m.

CVE-2010-4180

2010-12-0600:00:00
ubuntu.com
ubuntu.com
14

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

61.1%

JSON

OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when
SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly
prevent modification of the ciphersuite in the session cache, which allows
remote attackers to force the downgrade to an unintended cipher via vectors
involving sniffing network traffic to discover a session identifier.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchopenssl< 0.9.8a-7ubuntu0.14UNKNOWN
ubuntu8.04noarchopenssl< 0.9.8g-4ubuntu3.13UNKNOWN
ubuntu9.10noarchopenssl< 0.9.8g-16ubuntu3.5UNKNOWN
ubuntu10.04noarchopenssl< 0.9.8k-7ubuntu8.5UNKNOWN
ubuntu10.10noarchopenssl< 0.9.8o-1ubuntu4.3UNKNOWN

Related

nessus 52
openssl 1
veracode 1
debiancve 2
altlinux 5
redhat 3
f5 4
openvas 42
cve 2
prion 2
nvd 2
cvelist 2
oraclelinux 4
fedora 5
debian 2
osv 2
securityvulns 7
ubuntucve 1
slackware 1
ubuntu 1
centos 2
suse 2
cert 1
gentoo 1
ibm 1
vmware 4
lenovo 2
nessus
nessus
RHEL 6 : openssl (RHSA-2010:0979)
2010-12-14 00:00:00
SuSE9 Security Update : OpenSSL (YOU Patch Number 12701)
2011-05-04 00:00:00
Mandriva Linux Security Advisory : openssl (MDVSA-2010:248)
2010-12-08 00:00:00
openssl
openssl
Vulnerability in OpenSSL CVE-2010-4180
2010-12-02 00:00:00
veracode
veracode
Insecure TLS Configuration
2020-04-10 00:56:26
debiancve
debiancve
CVE-2010-4180
2010-12-06 21:05:48
CVE-2008-7270
2010-12-06 22:30:31
altlinux
altlinux
Security fix for the ALT Linux 6 package openssl10 version 1.0.0c-alt1
2011-02-01 00:00:00
Security fix for the ALT Linux 9 package openssl1.1 version 1.0.0c-alt1
2011-02-01 00:00:00
Security fix for the ALT Linux 7 package openssl10 version 1.0.0c-alt1
2011-02-01 00:00:00
redhat
redhat
(RHSA-2010:0979) Moderate: openssl security update
2010-12-13 00:00:00
(RHSA-2010:0978) Moderate: openssl security update
2010-12-13 00:00:00
(RHSA-2010:0977) Moderate: openssl security update
2010-12-13 00:00:00
f5
f5
K12543 : OpenSSL vulnerability CVE-2010-4180
2013-07-05 00:00:00
SOL12543 - OpenSSL vulnerability CVE-2010-4180
2011-01-26 00:00:00
K12853 : OpenSSL vulnerability CVE-2008-7270
2013-09-04 00:00:00
openvas
openvas
OpenSSL: Ciphersuite Downgrade Attack (20101202) - Linux
2021-08-16 00:00:00
OpenSSL: Ciphersuite Downgrade Attack (20101202) - Windows
2021-08-16 00:00:00
Mandriva Update for openssl MDVSA-2010:248 (openssl)
2010-12-23 00:00:00
cve
cve
CVE-2010-4180
2010-12-06 21:05:48
CVE-2008-7270
2010-12-06 22:30:31
prion
prion
Session fixation
2010-12-06 21:05:00
Session fixation
2010-12-06 22:30:00
nvd
nvd
CVE-2010-4180
2010-12-06 21:05:48
CVE-2008-7270
2010-12-06 22:30:31
cvelist
cvelist
CVE-2010-4180
2010-12-06 21:00:00
CVE-2008-7270
2010-12-06 22:00:00
oraclelinux
oraclelinux
openssl security update
2011-02-10 00:00:00
openssl security update
2010-12-13 00:00:00
openssl security update
2010-12-13 00:00:00
fedora
fedora
[SECURITY] Fedora 14 Update: openssl-1.0.0c-1.fc14
2010-12-10 20:26:33
[SECURITY] Fedora 14 Update: openssl-1.0.0d-1.fc14
2011-02-14 20:28:21
[SECURITY] Fedora 14 Update: openssl-1.0.0e-1.fc14
2011-09-10 23:55:13
debian
debian
[SECURITY] [DSA-2141-1] New openssl packages fix protocol design flaw
2011-01-05 23:18:09
[SECURITY] [DSA-2141-1] New openssl packages fix protocol design flaw
2011-01-05 23:18:09
osv
osv
nss - protocol design flaw
2011-01-06 00:00:00
openssl - protocol design flaw
2011-01-06 00:00:00
securityvulns
securityvulns
[USN-1029-1] OpenSSL vulnerabilities
2010-12-09 00:00:00
OpenSSL protection level downgrade
2010-12-09 00:00:00
[security bulletin] HPSBMA02658 SSRT100413 rev.1 - Insight Control for Linux &#40;IC-Linux&#41;, Remote Unauthorized Elevation of Privilege, Execution of Arbitrary Code, Encryption Downgrade, Information Disclosure, Denial of Service &#40;DoS&#41;
2011-04-26 00:00:00
ubuntucve
ubuntucve
CVE-2008-7270
2010-12-06 00:00:00
slackware
slackware
[slackware-security] openssl
2010-12-07 07:14:58
ubuntu
ubuntu
OpenSSL vulnerabilities
2010-12-08 00:00:00
centos
centos
openssl security update
2010-12-14 01:19:08
openssl security update
2011-01-27 09:11:13
suse
suse
compat-openssl097g (important)
2011-07-27 16:08:25
Security update for compat-openssl097g (important)
2011-07-27 17:08:16
cert
cert
Fiery Network Controllers for Xerox DocuColor 242/252/260 Printer/Copier use a vulnerable version of OpenSSL
2013-03-18 00:00:00
gentoo
gentoo
OpenSSL: Multiple vulnerabilities
2011-10-09 00:00:00
ibm
ibm
Security Bulletin: IBM Smart Analytics System 7600, 7700, and 7710 are affected by vulnerabilities in OpenSSL
2022-09-25 20:45:36
vmware
vmware
VMware vSphere and vCOps updates to third party libraries
2012-08-30 00:00:00
VMware vSphere and vCOps updates to third party libraries
2012-08-30 00:00:00
VMware third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX
2011-10-27 00:00:00
lenovo
lenovo
Intel® PROSet/Wireless WiFi Software Vulnerabilities - US
2018-11-13 17:10:51
Intel® PROSet/Wireless WiFi Software Vulnerabilities - Lenovo Support US
2018-11-13 17:10:51

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

61.1%

JSON
Related for UB:CVE-2010-4180
nessus52openssl1veracode1debiancve2altlinux5redhat3f54openvas42cve2prion2nvd2cvelist2oraclelinux4fedora5debian2osv2securityvulns7ubuntucve1slackware1ubuntu1centos2suse2cert1gentoo1ibm1vmware4lenovo2