CVE-2016-2183 in Siebel UI Framework

Zusammenfassung (Englisch)

The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated by an HTTPS session using Triple DES in CBC mode, aka a "Sweet32" attack.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Reservieren

29.01.2016

Status

Bestätigt

Einträge

VulDB provides additional information and datapoints for this CVE:

ID	Schwachstelle	CWE	Aus	Mas	CVE
185031	Oracle Siebel UI Framework OpenSSL Information Disclosure	200	Nicht definiert	Offizieller Fix	CVE-2016-2183
108100	Oracle HTTP Server OSSL Information Disclosure	200	Proof-of-Concept	Offizieller Fix	CVE-2016-2183
103783	Oracle Database Server Real Application Clusters Information Disclosure	200	Proof-of-Concept	Offizieller Fix	CVE-2016-2183
95695	Oracle Java SE Libraries Information Disclosure	200	Proof-of-Concept	Offizieller Fix	CVE-2016-2183
91899	OpenSSL DES/3DES SWEET32 schwache Verschlüsselung	311	Proof-of-Concept	Offizieller Fix	CVE-2016-2183
90939	OpenSSL 64-bit Block Cipher SWEET32 Information Disclosure	200	Proof-of-Concept	Unavailable	CVE-2016-2183

Quellen

• MITRE
• NVD
• CVE Details