NVD

Id
25153  
Name
CVE-2015-3276  
Description
The nss_parse_ciphers function in libraries/libldap/tls_m.c in OpenLDAP does not properly parse OpenSSL-style multi-keyword mode cipher strings, which might cause a weaker than intended cipher to be used and allow remote attackers to have unspecified impact via unknown vectors.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2015-12-07  
Modified Date
2016-10-14  
Seq
2015-3276  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
133029 25153 CVE-2015-3276 RHSA-2015:2131  View
133030 25153 CVE-2015-3276 http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html  View
133031 25153 CVE-2015-3276 1034221  View
133032 25153 CVE-2015-3276 https://bugzilla.redhat.com/show_bug.cgi?id=1238322  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
10816 JVNDB-2015-006136 OpenLDAP の libraries/libldap/tls_m.c の nss_parse_ciphers 関数における脆弱性 OpenLDAP の libraries/libldap/tls_m.c の nss_parse_ciphers 関数は、OpenSSL スタイルのマルチキーワードモードの暗号文字列を適切に解析しないため、意図したものより脆弱な暗号を使用される原因となり、不特定の影響を受ける脆弱性が存在します。 CVE-2015-3276 80501 CVE-2015-3276 25153 5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-006136.html 2015-11-19 2015-12-09 View