CVE-2016-3125

The mod_tls module in ProFTPD before 1.3.5b and 1.3.6 before 1.3.6rc2 does not properly handle the TLSDHParamFile directive, which might cause a weaker than intended Diffie-Hellman (DH) key to be used and consequently allow attackers to have unspecified impact via unknown vectors.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:proftpd:proftpd:*:a:*:*:*:*:*:*
cpe:2.3:a:proftpd:proftpd:1.3.6:rc1:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*

Configuration 3 (hide)

OR cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*

History

21 Nov 2024, 02:49

Type Values Removed Values Added
References () http://bugs.proftpd.org/show_bug.cgi?id=4230 - Issue Tracking () http://bugs.proftpd.org/show_bug.cgi?id=4230 - Issue Tracking
References () http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179109.html - Third Party Advisory () http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179109.html - Third Party Advisory
References () http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179143.html - Third Party Advisory () http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179143.html - Third Party Advisory
References () http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179905.html - () http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179905.html -
References () http://lists.opensuse.org/opensuse-updates/2016-05/msg00080.html - () http://lists.opensuse.org/opensuse-updates/2016-05/msg00080.html -
References () http://lists.opensuse.org/opensuse-updates/2016-06/msg00045.html - Third Party Advisory () http://lists.opensuse.org/opensuse-updates/2016-06/msg00045.html - Third Party Advisory
References () http://proftpd.org/docs/NEWS-1.3.5b - Release Notes () http://proftpd.org/docs/NEWS-1.3.5b - Release Notes
References () http://proftpd.org/docs/NEWS-1.3.6rc2 - Release Notes () http://proftpd.org/docs/NEWS-1.3.6rc2 - Release Notes
References () http://www.openwall.com/lists/oss-security/2016/03/11/14 - Mailing List () http://www.openwall.com/lists/oss-security/2016/03/11/14 - Mailing List
References () http://www.openwall.com/lists/oss-security/2016/03/11/3 - Mailing List () http://www.openwall.com/lists/oss-security/2016/03/11/3 - Mailing List

Information

Published : 2016-04-05 20:59

Updated : 2024-11-21 02:49


NVD link : CVE-2016-3125

Mitre link : CVE-2016-3125

CVE.ORG link : CVE-2016-3125


JSON object : View

Products Affected

opensuse

  • opensuse

proftpd

  • proftpd

fedoraproject

  • fedora
CWE
CWE-254

7PK - Security Features

CWE-310

Cryptographic Issues