VDB
DEBIAN-CVE-2015-3230
DEBIAN-CVE-2015-3230
PUBLISHED
CVSS 9.300000190734863 CRITICAL
389 Directory Server (formerly Fedora Directory Server) before 1.3.3.12 does not enforce the nsSSL3Ciphers preference when creating an sslSocket, which allows remote attackers to have unspecified impact by requesting to use a disabled cipher.
Risk Scores
CVSS v4.0
9.300000190734863
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:12 | 389-ds-base | 0, 0, 0 |
| Debian:13 | 389-ds-base | 0, 0, 0 |
| Debian:11 | 389-ds-base | 0, 0, 0 |
Timeline
- Oct 29, 2015 CVE Published
- Apr 28, 2026 CVE Updated