Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
OpenSSL before 0.9.8j, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the use of a disabled cipher via vectors involving sniffing network traffic to discover a session identifier, a different vulnerability than CVE-2010-4180.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
OpenSSL OpenSSL实现加密问题漏洞
Vulnerability Description
OpenSSL 是一种开放源码的SSL实现，用来实现网络通信的高强度加密，现在被广泛地用于各种网络应用程序中。 当SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG启用时，OpenSSL 0.9.8j之前版本不能阻止会话缓存中对密码套件的修改。远程攻击者可以借助和嗅探网络通信以发现会话标识符有关的向量强迫使用禁用的密码。
CVSS Information
N/A
Vulnerability Type
N/A