CVE-2016-3125 in ProFTPD
Summary
The mod_tls module in ProFTPD before 1.3.5b and 1.3.6 before 1.3.6rc2 does not properly handle the TLSDHParamFile directive, which might cause a weaker than intended Diffie-Hellman (DH) key to be used and consequently allow attackers to have unspecified impact via unknown vectors.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Reservation
03/11/2016
Disclosure
04/05/2016
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 81624 | ProFTPD mod_tls mod_tls.c 7pk security | 254 | Not defined | Official fix | CVE-2016-3125 |