PT-2010-3892 · Sourcefire · Sourcefire 3D Sensor+1

Published 2010-06-16 · Updated 2018-10-10 · CVE-2010-2306

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:A/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Sourcefire 3D Sensor versions 1000, 2000, and 9900 Sourcefire Defense Center version 1000

Description The issue allows remote attackers to decrypt SSL traffic via a man-in-the-middle (MITM) attack due to the use of the same static, private SSL keys for multiple devices and installations.

Recommendations For Sourcefire 3D Sensor versions 1000, 2000, and 9900, regenerate unique SSL keys for each device. For Sourcefire Defense Center version 1000, regenerate unique SSL keys for each installation. As a temporary workaround, consider restricting access to sensitive data transmitted over SSL until unique keys are generated.

Fix

Weakness Enumeration

CWE-16

Related Identifiers

CVE-2010-2306

Affected Products

Sourcefire 3D Sensor

Sourcefire Defense Center

References · 9

• http://secunia.com/advisories/40143 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-2306 · Security Note
• http://vupen.com/english/advisories/2010/1438 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/59380 · Note
• http://zerodayinitiative.com/advisories/ZDI-10-107 · Note
• https://support.sourcefire.com/notices/notice/1437 · Note
• http://securitytracker.com/id?1024092 · Note
• http://osvdb.org/65470 · Note
• http://securityfocus.com/archive/1/511792/100/0/threaded · Note