Vulnerability Details : CVE-2010-4180

OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the downgrade to an unintended cipher via vectors involving sniffing network traffic to discover a session identifier.
Publish Date : 2010-12-06 Last Update Date : 2012-04-05

Collapse All Expand All Select Select&Copy	Scroll To Vendor Statements(0) Additional Vendor Data(0) OVAL Definitions(0) Vulnerable Products(0) # Of Vulns By Products References(0) Metasploit Modules(0)	Comments View User Comments Add Comment	External Links Secunia Advisories XForce Advisories Vulnerability Details at NVD Vulnerability Details at Mitre Nessus Plugins Linux Kernel Git Repository First CVSS Guide
Related Tweets Even more tweets Search Twitter Search YouTube Search Google

- CVSS Scores & Vulnerability Types

Cvss Score	4.3
Confidentiality Impact	None (There is no impact to the confidentiality of the system.)
Integrity Impact	Partial (Modification of some system files or information is possible, but the attacker does not have control over what can be modified, or the scope of what the attacker can affect is limited.)
Availability Impact	None (There is no impact to the availability of the system.)
Access Complexity	Medium (The access conditions are somewhat specialized. Some preconditions must be satistified to exploit)
Authentication	Not required (Authentication is not required to exploit the vulnerability.)
Gained Access	None
Vulnerability Type(s)
CWE ID	CWE id is not defined for this vulnerability

- Additional Vendor Supplied Data

Vendor	Impact	CVSS Score	CVSS Vector	Report Date	Publish Date
Redhat	moderate	4.3	AV:N/AC:M/Au:N/C:N/I:P/A:N	2010-12-02	2010-12-02

If you are a vendor and you have additional data which can be automatically imported into our database, please contact admin @ cvedetails.com

- Related OVAL Definitions

Title	Definition Id	Family
CVE-2010-4180	oval:org.opensuse.security:def:20104180	unix
RHSA-2010:0977: openssl security update (Moderate)	oval:com.redhat.rhsa:def:20100977	unix
RHSA-2010:0978: openssl security update (Moderate)	oval:com.redhat.rhsa:def:20100978	unix
RHSA-2010:0979: openssl security update (Moderate)	oval:com.redhat.rhsa:def:20100979	unix

OVAL (Open Vulnerability and Assessment Language) definitions define exactly what should be done to verify a vulnerability or a missing patch. Check out the OVAL definitions if you want to learn what you should do to verify a vulnerability.

- Products Affected By CVE-2010-4180

#	Product Type	Vendor	Product	Version	Update
1	Application	Openssl	Openssl	0.9.1c		Details Vulnerabilities
2	Application	Openssl	Openssl	0.9.2b		Details Vulnerabilities
3	Application	Openssl	Openssl	0.9.3a		Details Vulnerabilities
4	Application	Openssl	Openssl	0.9.3		Details Vulnerabilities
5	Application	Openssl	Openssl	0.9.4		Details Vulnerabilities
6	Application	Openssl	Openssl	0.9.5a	Beta1	Details Vulnerabilities
7	Application	Openssl	Openssl	0.9.5a	Beta2	Details Vulnerabilities
8	Application	Openssl	Openssl	0.9.5		Details Vulnerabilities
9	Application	Openssl	Openssl	0.9.5	Beta1	Details Vulnerabilities
10	Application	Openssl	Openssl	0.9.5	Beta2	Details Vulnerabilities
11	Application	Openssl	Openssl	0.9.5a		Details Vulnerabilities
12	Application	Openssl	Openssl	0.9.6k		Details Vulnerabilities
13	Application	Openssl	Openssl	0.9.6a		Details Vulnerabilities
14	Application	Openssl	Openssl	0.9.6h		Details Vulnerabilities
15	Application	Openssl	Openssl	0.9.6	Beta2	Details Vulnerabilities
16	Application	Openssl	Openssl	0.9.6j		Details Vulnerabilities
17	Application	Openssl	Openssl	0.9.6a	Beta1	Details Vulnerabilities
18	Application	Openssl	Openssl	0.9.6c		Details Vulnerabilities
19	Application	Openssl	Openssl	0.9.6	Beta3	Details Vulnerabilities
20	Application	Openssl	Openssl	0.9.6m		Details Vulnerabilities
21	Application	Openssl	Openssl	0.9.6a	Beta2	Details Vulnerabilities
22	Application	Openssl	Openssl	0.9.6b		Details Vulnerabilities
23	Application	Openssl	Openssl	0.9.6g		Details Vulnerabilities
24	Application	Openssl	Openssl	0.9.6l		Details Vulnerabilities
25	Application	Openssl	Openssl	0.9.6a	Beta3	Details Vulnerabilities
26	Application	Openssl	Openssl	0.9.6e		Details Vulnerabilities
27	Application	Openssl	Openssl	0.9.6f		Details Vulnerabilities
28	Application	Openssl	Openssl	0.9.6		Details Vulnerabilities
29	Application	Openssl	Openssl	0.9.6d		Details Vulnerabilities
30	Application	Openssl	Openssl	0.9.6i		Details Vulnerabilities
31	Application	Openssl	Openssl	0.9.6	Beta1	Details Vulnerabilities
32	Application	Openssl	Openssl	0.9.7d		Details Vulnerabilities
33	Application	Openssl	Openssl	0.9.7m		Details Vulnerabilities
34	Application	Openssl	Openssl	0.9.7f		Details Vulnerabilities
35	Application	Openssl	Openssl	0.9.7e		Details Vulnerabilities
36	Application	Openssl	Openssl	0.9.7	Beta1	Details Vulnerabilities
37	Application	Openssl	Openssl	0.9.7	Beta6	Details Vulnerabilities
38	Application	Openssl	Openssl	0.9.7g		Details Vulnerabilities
39	Application	Openssl	Openssl	0.9.7b		Details Vulnerabilities
40	Application	Openssl	Openssl	0.9.7		Details Vulnerabilities
41	Application	Openssl	Openssl	0.9.7a		Details Vulnerabilities
42	Application	Openssl	Openssl	0.9.7j		Details Vulnerabilities
43	Application	Openssl	Openssl	0.9.7c		Details Vulnerabilities
44	Application	Openssl	Openssl	0.9.7	Beta3	Details Vulnerabilities
45	Application	Openssl	Openssl	0.9.7	Beta4	Details Vulnerabilities
46	Application	Openssl	Openssl	0.9.7k		Details Vulnerabilities
47	Application	Openssl	Openssl	0.9.7h		Details Vulnerabilities
48	Application	Openssl	Openssl	0.9.7	Beta2	Details Vulnerabilities
49	Application	Openssl	Openssl	0.9.7	Beta5	Details Vulnerabilities
50	Application	Openssl	Openssl	0.9.7l		Details Vulnerabilities
51	Application	Openssl	Openssl	0.9.7i		Details Vulnerabilities
52	Application	Openssl	Openssl	0.9.8		Details Vulnerabilities
53	Application	Openssl	Openssl	0.9.8p		Details Vulnerabilities
54	Application	Openssl	Openssl	0.9.8k		Details Vulnerabilities
55	Application	Openssl	Openssl	0.9.8a		Details Vulnerabilities
56	Application	Openssl	Openssl	0.9.8i		Details Vulnerabilities
57	Application	Openssl	Openssl	0.9.8d		Details Vulnerabilities
58	Application	Openssl	Openssl	0.9.8e		Details Vulnerabilities
59	Application	Openssl	Openssl	0.9.8j		Details Vulnerabilities
60	Application	Openssl	Openssl	0.9.8g		Details Vulnerabilities
61	Application	Openssl	Openssl	0.9.8m		Details Vulnerabilities
62	Application	Openssl	Openssl	0.9.8h		Details Vulnerabilities
63	Application	Openssl	Openssl	0.9.8f		Details Vulnerabilities
64	Application	Openssl	Openssl	0.9.8c		Details Vulnerabilities
65	Application	Openssl	Openssl	0.9.8n		Details Vulnerabilities
66	Application	Openssl	Openssl	0.9.8o		Details Vulnerabilities
67	Application	Openssl	Openssl	0.9.8l		Details Vulnerabilities
68	Application	Openssl	Openssl	0.9.8b		Details Vulnerabilities
69	Application	Openssl	Openssl	1.0.0	Beta1	Details Vulnerabilities
70	Application	Openssl	Openssl	1.0.0	Beta2	Details Vulnerabilities
71	Application	Openssl	Openssl	1.0.0		Details Vulnerabilities
72	Application	Openssl	Openssl	1.0.0a		Details Vulnerabilities
73	Application	Openssl	Openssl	1.0.0	Beta5	Details Vulnerabilities
74	Application	Openssl	Openssl	1.0.0	Beta3	Details Vulnerabilities
75	Application	Openssl	Openssl	1.0.0b		Details Vulnerabilities
76	Application	Openssl	Openssl	1.0.0	Beta4	Details Vulnerabilities