CVE-2016-3125
- State
- Published
- Severity
- Not scored
- Published
- Apr 5, 2016
- Updated
- Aug 5, 2024
- Reserved
- Mar 11, 2016
Description
The mod_tls module in ProFTPD before 1.3.5b and 1.3.6 before 1.3.6rc2 does not properly handle the TLSDHParamFile directive, which might cause a weaker than intended Diffie-Hellman (DH) key to be used and consequently allow attackers to have unspecified impact via unknown vectors.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- openSUSE-SU-2016:1558vendor-advisory
- FEDORA-2016-ac3587be9avendor-advisory
- [oss-security] 20160311 Re: ProFTPD before 1.3.5b/1.3.6rc2 uses 1024 bit Diffie Hellman parameters for TLS even if user sets manual parametersmailing-list
- http://proftpd.org/docs/NEWS-1.3.6rc2
- FEDORA-2016-f95d8ea3advendor-advisory
- http://proftpd.org/docs/NEWS-1.3.5b
- FEDORA-2016-977d57cf2dvendor-advisory
- openSUSE-SU-2016:1334vendor-advisory
- http://bugs.proftpd.org/show_bug.cgi?id=4230
- [oss-security] 20160311 ProFTPD before 1.3.5b/1.3.6rc2 uses 1024 bit Diffie Hellman parameters for TLS even if user sets manual parametersmailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.