libraries/libldap/tls_m.c in OpenLDAP, possibly 2.4.31 and earlier, when using the Mozilla NSS backend, always uses the default cipher suite even when TLSCipherSuite is set, which might cause OpenLDAP to use weaker ciphers than intended and make it easier for remote attackers to obtain sensitive information.
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 01:39
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=676309 - | |
| References | () http://rhn.redhat.com/errata/RHSA-2012-1151.html - | |
| References | () http://seclists.org/fulldisclosure/2019/Dec/26 - | |
| References | () http://security.gentoo.org/glsa/glsa-201406-36.xml - | |
| References | () http://www.openldap.org/devel/gitweb.cgi?p=openldap.git%3Ba=commitdiff%3Bh=2c2bb2e - | |
| References | () http://www.openldap.org/its/index.cgi?findid=7285 - | |
| References | () http://www.openwall.com/lists/oss-security/2012/06/05/4 - | |
| References | () http://www.openwall.com/lists/oss-security/2012/06/06/1 - | |
| References | () http://www.openwall.com/lists/oss-security/2012/06/06/2 - | |
| References | () http://www.securityfocus.com/bid/53823 - | |
| References | () http://www.securitytracker.com/id?1027127 - | |
| References | () https://bugzilla.redhat.com/show_bug.cgi?id=825875 - | |
| References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/76099 - | |
| References | () https://seclists.org/bugtraq/2019/Dec/23 - | |
| References | () https://support.apple.com/kb/HT210788 - |
Information
Published : 2012-06-17 03:41
Updated : 2024-11-21 01:39
NVD link : CVE-2012-2668
Mitre link : CVE-2012-2668
CVE.ORG link : CVE-2012-2668
JSON object : View
Products Affected
openldap
- openldap
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor