NVD

Id
14591  
Name
CVE-2010-3173  
Description
The SSL implementation in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 does not properly set the minimum key length for Diffie-Hellman Ephemeral (DHE) mode, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2010-10-21  
Modified Date
2011-07-18  
Seq
2010-3173  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
80779 14591 CVE-2010-3173 http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox  View
80780 14591 CVE-2010-3173 oval:org.mitre.oval:def:12118  View
80781 14591 CVE-2010-3173 http://support.avaya.com/css/P8/documents/100114250  View
80782 14591 CVE-2010-3173 http://support.avaya.com/css/P8/documents/100120156  View
80783 14591 CVE-2010-3173 DSA-2123  View
80784 14591 CVE-2010-3173 MDVSA-2010:210  View
80785 14591 CVE-2010-3173 MDVSA-2010:211  View
80786 14591 CVE-2010-3173 http://www.mozilla.org/security/announce/2010/mfsa2010-72.html  View
80787 14591 CVE-2010-3173 RHSA-2010:0781  View
80788 14591 CVE-2010-3173 RHSA-2010:0782  View
80789 14591 CVE-2010-3173 USN-1007-1  View
80790 14591 CVE-2010-3173 ADV-2011-0061  View
80791 14591 CVE-2010-3173 https://bugzilla.mozilla.org/show_bug.cgi?id=554354  View
80792 14591 CVE-2010-3173 https://bugzilla.mozilla.org/show_bug.cgi?id=583337  View
80793 14591 CVE-2010-3173 https://bugzilla.mozilla.org/show_bug.cgi?id=587234  View
80794 14591 CVE-2010-3173 https://bugzilla.mozilla.org/show_bug.cgi?id=595300  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36515 JVNDB-2010-002295 複数の Mozilla 製品の SSL 実装における暗号保護メカニズムを回避される脆弱性 複数の Mozilla 製品の SSL 実装には、Diffie-Hellman Ephemeral (DHE) モードの最小キーの長さを適切に設定しないため、暗号保護メカニズムを回避される脆弱性が存在します。 CVE-2010-3173 45753 CVE-2010-3173 14591 7.5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002295.html 2010-10-19 2012-12-18 View