NVD

Id
15463  
Name
CVE-2010-4180  
Description
OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the downgrade to an unintended cipher via vectors involving sniffing network traffic to discover a session identifier.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-18  
Published
2010-12-06  
Modified Date
2016-08-22  
Seq
2010-4180  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
87360 15463 CVE-2010-4180 http://cvs.openssl.org/chngview?cn=20131  View
87361 15463 CVE-2010-4180 SSRT100413  View
87362 15463 CVE-2010-4180 APPLE-SA-2011-06-23-1  View
87363 15463 CVE-2010-4180 FEDORA-2010-18765  View
87364 15463 CVE-2010-4180 FEDORA-2010-18736  View
87365 15463 CVE-2010-4180 SUSE-SR:2011:001  View
87366 15463 CVE-2010-4180 SUSE-SR:2011:009  View
87367 15463 CVE-2010-4180 openSUSE-SU-2011:0845  View
87368 15463 CVE-2010-4180 SUSE-SU-2011:0847  View
87369 15463 CVE-2010-4180 SSRT100339  View
87370 15463 CVE-2010-4180 SSRT100475  View
87371 15463 CVE-2010-4180 HPSBHF02706  View
87372 15463 CVE-2010-4180 http://openssl.org/news/secadv_20101202.txt  View
87373 15463 CVE-2010-4180 oval:org.mitre.oval:def:18910  View
87374 15463 CVE-2010-4180 SSA:2010-340-01  View
87375 15463 CVE-2010-4180 http://support.apple.com/kb/HT4723  View
87376 15463 CVE-2010-4180 USN-1029-1  View
87377 15463 CVE-2010-4180 DSA-2141  View
87378 15463 CVE-2010-4180 VU#737740  View
87379 15463 CVE-2010-4180 MDVSA-2010:248  View
87380 15463 CVE-2010-4180 RHSA-2010:0977  View
87381 15463 CVE-2010-4180 RHSA-2010:0978  View
87382 15463 CVE-2010-4180 RHSA-2010:0979  View
87383 15463 CVE-2010-4180 RHSA-2011:0896  View
87384 15463 CVE-2010-4180 SSRT100817  View
87385 15463 CVE-2010-4180 45164  View
87386 15463 CVE-2010-4180 1024822  View
87387 15463 CVE-2010-4180 ADV-2010-3120  View
87388 15463 CVE-2010-4180 ADV-2010-3122  View
87389 15463 CVE-2010-4180 ADV-2010-3134  View
87390 15463 CVE-2010-4180 ADV-2010-3188  View
87391 15463 CVE-2010-4180 ADV-2011-0032  View
87392 15463 CVE-2010-4180 ADV-2011-0076  View
87393 15463 CVE-2010-4180 ADV-2011-0268  View
87394 15463 CVE-2010-4180 https://bugzilla.redhat.com/show_bug.cgi?id=659462  View
87395 15463 CVE-2010-4180 https://kb.bluecoat.com/index?page=content&id=SA53&actp=LIST  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36768 JVNDB-2010-002548 OpenSSL における暗号スイートのダウングレードに関する脆弱性 OpenSSL は、SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG が有効な際、セッションキャッシュ内にある暗号スイートへの変更を適切に制限しないため、意図しない暗号スイートのダウングレードを強制的に実行される脆弱性が存在します。 CVE-2010-4180 46760 CVE-2010-4180 15463 4.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002548.html 2010-12-02 2012-12-18 View