NVD

Id
6999  
Name
CVE-2008-7270  
Description
OpenSSL before 0.9.8j, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the use of a disabled cipher via vectors involving sniffing network traffic to discover a session identifier, a different vulnerability than CVE-2010-4180.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-03  
Published
2010-12-06  
Modified Date
2012-04-05  
Seq
2008-7270  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
39498 6999 CVE-2008-7270 http://cvs.openssl.org/chngview?cn=17489  View
39499 6999 CVE-2008-7270 HPSBHF02706  View
39500 6999 CVE-2008-7270 USN-1029-1  View
39501 6999 CVE-2008-7270 RHSA-2010:0977  View
39502 6999 CVE-2008-7270 RHSA-2010:0978  View
39503 6999 CVE-2008-7270 RHSA-2011:0896  View
39504 6999 CVE-2008-7270 SSRT100817  View
39505 6999 CVE-2008-7270 45254  View
39506 6999 CVE-2008-7270 https://bugzilla.redhat.com/show_bug.cgi?id=659462  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36835 JVNDB-2010-002615 OpenSSL における暗号を強制的に利用される脆弱性 OpenSSL は、SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG が有効な際、セッションキャッシュ内にある暗号スイートへの変更を適切に制限しないため、利用できない暗号を強制的に利用される脆弱性が存在します。 CVE-2008-7270 37383 CVE-2008-7270 6999 4.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002615.html 2010-12-06 2012-12-18 View