CVE-2013-1654 in Oracle HTTP Server
Summary
Puppet 2.7.x before 2.7.21 and 3.1.x before 3.1.1, and Puppet Enterprise 2.7.x before 2.7.2, does not properly negotiate the SSL protocol between client and master, which allows remote attackers to conduct SSLv2 downgrade attacks against SSLv3 sessions via unspecified vectors.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Reservation
02/11/2013
Disclosure
03/20/2013
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 11816 | Oracle HTTP Server OSSL memory corruption | 119 | Not defined | Official fix | CVE-2013-1654 |