QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2015-0138

Back to search

CVE-2015-0138

Published: Mar 25, 2015

Modified: Aug 6, 2024

PUBLISHED

Description

GSKit in IBM Tivoli Directory Server (ITDS) 6.0 before 6.0.0.73-ISS-ITDS-IF0073, 6.1 before 6.1.0.66-ISS-ITDS-IF0066, 6.2 before 6.2.0.42-ISS-ITDS-IF0042, and 6.3 before 6.3.0.35-ISS-ITDS-IF0035 and IBM Security Directory Server (ISDS) 6.3.1 before 6.3.1.9-ISS-ISDS-IF0009 does not properly restrict TLS state transitions, which makes it easier for remote attackers to conduct cipher-downgrade attacks to EXPORT_RSA ciphers via crafted TLS traffic, related to the "FREAK" issue, a different vulnerability than CVE-2015-0204.

VendorProductVersions

n/a

n/a

affected
n/a

References

RHSA-2015:1007
vendor-advisory
x_refsource_REDHAT
73326
vdb-entry
x_refsource_BID
RHSA-2015:1006
vendor-advisory
x_refsource_REDHAT
RHSA-2015:1091
vendor-advisory
x_refsource_REDHAT
SUSE-SU-2015:1138
vendor-advisory
x_refsource_SUSE
RHSA-2015:1020
vendor-advisory
x_refsource_REDHAT
SUSE-SU-2015:1086
vendor-advisory
x_refsource_SUSE
SUSE-SU-2015:1085
vendor-advisory
x_refsource_SUSE
RHSA-2015:1021
vendor-advisory
x_refsource_REDHAT
SUSE-SU-2015:1073
vendor-advisory
x_refsource_SUSE
SUSE-SU-2015:1161
vendor-advisory
x_refsource_SUSE

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now