CVE-2015-3197
15.02.2016, 02:59
ssl/s2_srvr.c in OpenSSL 1.0.1 before 1.0.1r and 1.0.2 before 1.0.2f does not prevent use of disabled ciphers, which makes it easier for man-in-the-middle attackers to defeat cryptographic protection mechanisms by performing computations on SSLv2 traffic, related to the get_client_master_key and get_client_hello functions.Enginsight
| Vendor | Product | Version |
|---|---|---|
| oracle | tuxedo | 12.1.1.0 |
| oracle | exalogic_infrastructure | 1.0 |
| oracle | exalogic_infrastructure | 2.0 |
| oracle | peoplesoft_enterprise_peopletools | 8.53 |
| oracle | peoplesoft_enterprise_peopletools | 8.54 |
| oracle | peoplesoft_enterprise_peopletools | 8.55 |
| openssl | openssl | 1.0.1 |
| openssl | openssl | 1.0.1:beta1 |
| openssl | openssl | 1.0.1:beta2 |
| openssl | openssl | 1.0.1:beta3 |
| openssl | openssl | 1.0.1a:a |
| openssl | openssl | 1.0.1b:b |
| openssl | openssl | 1.0.1c:c |
| openssl | openssl | 1.0.1d:d |
| openssl | openssl | 1.0.1e:e |
| openssl | openssl | 1.0.1f:f |
| openssl | openssl | 1.0.1g:g |
| openssl | openssl | 1.0.1h:h |
| openssl | openssl | 1.0.1i:i |
| openssl | openssl | 1.0.1j:j |
| openssl | openssl | 1.0.1k:k |
| openssl | openssl | 1.0.1l:l |
| openssl | openssl | 1.0.1m:m |
| openssl | openssl | 1.0.1n:n |
| openssl | openssl | 1.0.1o:o |
| openssl | openssl | 1.0.1p:p |
| openssl | openssl | 1.0.1q:q |
| openssl | openssl | 1.0.2 |
| openssl | openssl | 1.0.2:beta1 |
| openssl | openssl | 1.0.2:beta2 |
| openssl | openssl | 1.0.2:beta3 |
| openssl | openssl | 1.0.2a:a |
| openssl | openssl | 1.0.2b:b |
| openssl | openssl | 1.0.2c:c |
| openssl | openssl | 1.0.2d:d |
| openssl | openssl | 1.0.2e:e |
| oracle | oss_support_tools | 8.11.16.3.8 |
| oracle | vm_virtualbox | 5.0.16 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
References