Vulnerability CVE-2010-2306
Published: 2010-06-16   Modified: 2012-02-13

Description:
The default installation of Sourcefire 3D Sensor 1000, 2000, and 9900; and Defense Center 1000; uses the same static, private SSL keys for multiple devices and installations, which allows remote attackers to decrypt SSL traffic via a man-in-the-middle (MITM) attack.

See advisories in our WLB2 database:
Topic
Author
Date
Low
Multiple Sourcefire Products Static Web SSL Keys Vulnerability
ZDI
18.06.2010

Type:

CWE-16

 (Configuration)

CVSS2 => (AV:A/AC:M/Au:N/C:P/I:P/A:N)

CVSS Base Score
Impact Subscore
Exploitability Subscore
4.3/10
4.9/10
5.5/10
Exploit range
Attack complexity
Authentication
Adjacent network
Medium
No required
Confidentiality impact
Integrity impact
Availability impact
Partial
Partial
None
Affected software
Sourcefire -> 3d1000 
Sourcefire -> 3d2000 
Sourcefire -> 3d9900 
Sourcefire -> Dc1000 

 References:
http://www.securityfocus.com/archive/1/511792/100/0/threaded
http://www.securitytracker.com/id?1024092
http://www.vupen.com/english/advisories/2010/1438
http://www.zerodayinitiative.com/advisories/ZDI-10-107/
https://exchange.xforce.ibmcloud.com/vulnerabilities/59380
https://support.sourcefire.com/notices/notice/1437
Copyright 2024, cxsecurity.com

 

Back to Top