CVE-2012-2668
- State
- Published
- Severity
- Not scored
- Published
- Jun 17, 2012
- Updated
- Aug 6, 2024
- Reserved
- May 14, 2012
Description
libraries/libldap/tls_m.c in OpenLDAP, possibly 2.4.31 and earlier, when using the Mozilla NSS backend, always uses the default cipher suite even when TLSCipherSuite is set, which might cause OpenLDAP to use weaker ciphers than intended and make it easier for remote attackers to obtain sensitive information.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- [oss-security] 20120606 Re: CVE request: openldap does not honor TLSCipherSuite configuration optionmailing-list
- GLSA-201406-36vendor-advisory
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=676309
- RHSA-2012:1151vendor-advisory
- http://www.openldap.org/its/index.cgi?findid=7285
- [oss-security] 20120605 CVE request: openldap does not honor TLSCipherSuite configuration optionmailing-list
- https://bugzilla.redhat.com/show_bug.cgi?id=825875
- [oss-security] 20120605 Re: CVE request: openldap does not honor TLSCipherSuite configuration optionmailing-list
- openldap-nss-weak-security(76099)vdb-entry
- 1027127vdb-entry
- http://www.openldap.org/devel/gitweb.cgi?p=openldap.git%3Ba=commitdiff%3Bh=2c2bb2e
- 53823vdb-entry
- https://support.apple.com/kb/HT210788
- 20191211 APPLE-SA-2019-12-10-3 macOS Catalina 10.15.2, Security Update 2019-002 Mojave, Security Update 2019-007 High Sierramailing-list
- 20191213 APPLE-SA-2019-12-10-3 macOS Catalina 10.15.2, Security Update 2019-002 Mojave, Security Update 2019-007 High Sierramailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.