diff options
| author | mm <mm@FreeBSD.org> | 2016-04-20 19:46:34 +0800 |
|---|---|---|
| committer | mm <mm@FreeBSD.org> | 2016-04-20 19:46:34 +0800 |
| commit | 3472fe158b17a6837201c53fca9402b46daf365b (patch) | |
| tree | 9a6a94ec01ff8a66ec7c077678355b0883841e97 /security | |
| parent | 60fa71a5701dcacd9ae24bc4cc6ee7b9e4b3e87c (diff) | |
| download | freebsd-ports-gnome-3472fe158b17a6837201c53fca9402b46daf365b.tar.gz freebsd-ports-gnome-3472fe158b17a6837201c53fca9402b46daf365b.tar.zst freebsd-ports-gnome-3472fe158b17a6837201c53fca9402b46daf365b.zip | |
Document security vulnerability in proftpd mod_tls.
PR: 208876
Security: CVE-2016-3125
Diffstat (limited to 'security')
| -rw-r--r-- | security/vuxml/vuln.xml | 30 |
1 files changed, 30 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index 2caeeec73dec..fb9cbe34e1b8 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -58,6 +58,36 @@ Notes: * Do not forget port variants (linux-f10-libxml2, libxml2, etc.) --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="a733b5ca-06eb-11e6-817f-3085a9a4510d"> + <topic>proftpd -- vulnerability in mod_tls</topic> + <affects> + <package> + <name>proftpd</name> + <range><lt>1.3.5b</lt></range> + <range><eq>1.3.6.r1</eq></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>MITRE reports:</p> + <blockquote cite="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3125"> + <p>The mod_tls module in ProFTPD before 1.3.5b and 1.3.6 before + 1.3.6rc2 does not properly handle the TLSDHParamFile directive, which + might cause a weaker than intended Diffie-Hellman (DH) key to be used + and consequently allow attackers to have unspecified impact via + unknown vectors.</p> + </blockquote> + </body> + </description> + <references> + <cvename>CVE-2016-3125</cvename> + </references> + <dates> + <discovery>2016-03-08</discovery> + <entry>2016-04-20</entry> + </dates> + </vuln> + <vuln vid="6d8505f0-0614-11e6-b39c-00262d5ed8ee"> <topic>chromium -- multiple vulnerabilities</topic> <affects> |