CVE-2015-3276 in OpenLDAP

Resumen (Inglés)

The nss_parse_ciphers function in libraries/libldap/tls_m.c in OpenLDAP does not properly parse OpenSSL-style multi-keyword mode cipher strings, which might cause a weaker than intended cipher to be used and allow remote attackers to have unspecified impact via unknown vectors.

Reservar

2015-04-10

Divulgación

2015-12-07

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
79332	OpenLDAP Multi-Keyword Mode cifrado débil	310	No probado	Arreglo oficial	CVE-2015-3276