NVD

Id
68633  
Name
CVE-2005-2969  
Description
The SSL/TLS server implementation in OpenSSL 0.9.7 before 0.9.7h and 0.9.8 before 0.9.8a, when using the SSL_OP_MSIE_SSLV2_RSA_PADDING option, disables a verification step that is required for preventing protocol version rollback attacks, which allows remote attackers to force a client and server to use a weaker protocol than needed via a man-in-the-middle attack.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-07-18  
Published
2005-10-18  
Modified Date
2017-07-10  
Seq
2005-2969  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
354652 68633 CVE-2005-2969 ftp://ftp.software.ibm.com/pc/pccbbs/pc_servers/dir5.10.3_docs_relnotes.pdf  View
354653 68633 CVE-2005-2969 APPLE-SA-2005-11-29  View
354654 68633 CVE-2005-2969 SSRT061239  View
354655 68633 CVE-2005-2969 SSRT071299  View
354656 68633 CVE-2005-2969 TSLSA-2005-0059  View
354657 68633 CVE-2005-2969 oval:org.mitre.oval:def:11454  View
354658 68633 CVE-2005-2969 1015032  View
354659 68633 CVE-2005-2969 101974  View
354660 68633 CVE-2005-2969 http://support.avaya.com/elmodocs2/security/ASA-2006-031.htm  View
354661 68633 CVE-2005-2969 http://support.avaya.com/elmodocs2/security/ASA-2006-260.htm  View
354662 68633 CVE-2005-2969 http://www-1.ibm.com/support/docview.wss?uid=isg1SSRVHMCHMC_C081516_754  View
354663 68633 CVE-2005-2969 20051202 Cisco Security Notice: Response to OpenSSL - Potential SSL 2.0 Rollback  View
354664 68633 CVE-2005-2969 DSA-875  View
354665 68633 CVE-2005-2969 DSA-881  View
354666 68633 CVE-2005-2969 DSA-882  View
354667 68633 CVE-2005-2969 http://www.hitachi-support.com/security_e/vuls_e/HS06-022_e/01-e.html  View
354668 68633 CVE-2005-2969 http://www.hitachi-support.com/security_e/vuls_e/HS07-016_e/index-e.html  View
354669 68633 CVE-2005-2969 http://www.juniper.net/support/security/alerts/PSN-2005-12-025.txt  View
354670 68633 CVE-2005-2969 MDKSA-2005:179  View
354671 68633 CVE-2005-2969 SUSE-SA:2005:061  View
354672 68633 CVE-2005-2969 http://www.openssl.org/news/secadv_20051011.txt  View
354673 68633 CVE-2005-2969 RHSA-2005:762  View
354674 68633 CVE-2005-2969 RHSA-2005:800  View
354675 68633 CVE-2005-2969 RHSA-2008:0629  View
354676 68633 CVE-2005-2969 15071  View
354677 68633 CVE-2005-2969 15647  View
354678 68633 CVE-2005-2969 24799  View
354679 68633 CVE-2005-2969 ADV-2005-2036  View
354680 68633 CVE-2005-2969 ADV-2005-2659  View
354681 68633 CVE-2005-2969 ADV-2005-2710  View
354682 68633 CVE-2005-2969 ADV-2005-2908  View
354683 68633 CVE-2005-2969 ADV-2005-3002  View
354684 68633 CVE-2005-2969 ADV-2005-3056  View
354685 68633 CVE-2005-2969 ADV-2006-3531  View
354686 68633 CVE-2005-2969 ADV-2007-0326  View
354687 68633 CVE-2005-2969 ADV-2007-0343  View
354688 68633 CVE-2005-2969 ADV-2007-2457  View
354689 68633 CVE-2005-2969 hitachi-hicommand-security-bypass(35287)  View
354690 68633 CVE-2005-2969 https://issues.rpath.com/browse/RPL-1633  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58726 JVNDB-2006-000992 Hitachi Web Server における複数の脆弱性 Hitachi Web Server には下記の脆弱性が存在します。 CVE-2005-2969 14173 CVE-2005-2969 68633 5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000992.html 2006-12-21 2014-05-22 View
62399 JVNDB-2005-000601 OpenSSL におけるバージョン・ロールバックの脆弱性 OpenSSL Project より提供されている OpenSSL には、バージョン・ロールバックが可能な脆弱性が存在します。 CVE-2005-2969 14173 CVE-2005-2969 68633 2.6 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000601.html 2005-10-11 2014-05-22 View