PT-2010-3892 · Sourcefire · Sourcefire 3D Sensor+1

Publicado 2010-06-16 · Atualizado 2018-10-10 · CVE-2010-2306

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:A/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Sourcefire 3D Sensor versions 1000, 2000, and 9900 Sourcefire Defense Center version 1000

Description The issue allows remote attackers to decrypt SSL traffic via a man-in-the-middle (MITM) attack due to the use of the same static, private SSL keys for multiple devices and installations.

Recommendations For Sourcefire 3D Sensor versions 1000, 2000, and 9900, regenerate unique SSL keys for each device. For Sourcefire Defense Center version 1000, regenerate unique SSL keys for each installation. As a temporary workaround, consider restricting access to sensitive data transmitted over SSL until unique keys are generated.

Correção

Enumeração de Fraquezas

CWE-16

Identificadores relacionados

CVE-2010-2306

Produtos afetados

Sourcefire 3D Sensor

Sourcefire Defense Center

Referências · 9

• https://exchange.xforce.ibmcloud.com/vulnerabilities/59380 · Nota
• http://zerodayinitiative.com/advisories/ZDI-10-107 · Nota
• http://secunia.com/advisories/40143 · Aviso do Fabricante
• https://support.sourcefire.com/notices/notice/1437 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-2306 · Nota de Segurança
• http://vupen.com/english/advisories/2010/1438 · Aviso do Fabricante
• http://securitytracker.com/id?1024092 · Nota
• http://osvdb.org/65470 · Nota
• http://securityfocus.com/archive/1/511792/100/0/threaded · Nota