Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2016-3125 →
DEBIAN-CVE-2016-3125
The mod_tls module in ProFTPD before 1.3.5b and 1.3.6 before 1.3.6rc2 does not properly handle the TLSDHParamFile directive, which might cause a weake...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
The mod_tls module in ProFTPD before 1.3.5b and 1.3.6 before 1.3.6rc2 does not properly handle the TLSDHParamFile directive, which might cause a weaker than intended Diffie-Hellman (DH) key to be used and consequently allow attackers to have unspecified impact via unknown vectors.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
proftpd-dfsg
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.5b-1"}]}]
Debian:13
proftpd-dfsg
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.5b-1"}]}]
Debian:14
proftpd-dfsg
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.5b-1"}]}]
Références
- advisory security-tracker.debian.org