2010-10-21 21:00:02 2017-09-19 03:31:15

The SSL implementation in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 does not properly set the minimum key length for Diffie-Hellman Ephemeral (DHE) mode, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack.

Vector

NETWORK

Complexity

LOW

Authentication

NONE

Confidentiality

PARTIAL

Integrity

PARTIAL

Availability

PARTIAL
Mozilla SeaMonkey 1.0.5 Mozilla SeaMonkey 1.0.2 Mozilla SeaMonkey 1.0.1 Mozilla SeaMonkey 1.0 alpha Mozilla SeaMonkey 1.1 alpha Mozilla SeaMonkey 1.0.9 Mozilla SeaMonkey 1.0.4 Mozilla SeaMonkey 1.0.3 Mozilla SeaMonkey 1.0.8 Mozilla SeaMonkey 1.0.7 Mozilla SeaMonkey 2.0.7 Mozilla SeaMonkey 2.0.6 Mozilla Thunderbird 1.5 Mozilla SeaMonkey 2.0.3 Mozilla SeaMonkey 2.0.2 Mozilla SeaMonkey 2.0.8 Mozilla SeaMonkey 2.0.1 Mozilla Firefox 3.0.4 Mozilla Firefox 3.0.13 Mozilla Firefox 3.0.1 Mozilla Firefox 3.0.10 Mozilla Firefox 3.0.3 Mozilla Firefox 3.0.12 Mozilla Firefox 3.0.6 Mozilla Firefox 3.0.15 Mozilla SeaMonkey 2.0.5 Mozilla SeaMonkey 2.0.4 Mozilla Firefox 1.5.0.6 Mozilla Firefox 3.0.8 Mozilla Firefox 3.0.17 Mozilla Firefox 3.0.5 Mozilla Firefox 3.0.14 Mozilla Thunderbird 1.0 Mozilla Firefox 1.5.0.4 Mozilla Firefox 3.0.2 Mozilla Firefox 3.0.11 Mozilla Firefox 1.5.0.7 Mozilla Firefox 3.0.7 Mozilla Firefox 3.0.16 Mozilla Firefox 1.5 Beta 1 Mozilla Firefox 1.5 Beta 2 Mozilla Firefox 2.0.0.10 Mozilla Firefox 3.0 Mozilla Firefox 1.5.0.2 Mozilla Firefox 3.0.9 Mozilla SeaMonkey 2.0 RC2 Mozilla Firefox 1.5.0.3 Mozilla Firefox 1.5.0.1 Mozilla SeaMonkey 2.0 RC1 Mozilla Firefox 2.0.0.13 Mozilla Firefox 3.5 Mozilla Firefox 2.0.0.11 Mozilla Firefox 2.0.0.14 Mozilla Firefox 3.6 Mozilla Firefox 2.0.0.17 Mozilla Firefox 2.0.0.12 Mozilla Firefox 2.0.0.15 Mozilla Firefox 2.0.0.18 Mozilla Firefox 2.0.0.16 Mozilla Firefox 1.5.0.12 Mozilla Firefox 2.0.0.20 Mozilla Thunderbird 2.0.0.18 Mozilla Thunderbird 2.0.0.17 Mozilla Thunderbird 2.0.0.12 Mozilla Thunderbird 2.0.0.14 Mozilla Firefox 1.5.0.11 Mozilla Firefox 2.0.0.19 Mozilla Thunderbird 2.0.0.5 Mozilla Thunderbird 2.0.0.4 Mozilla Thunderbird 2.0.0.7 Mozilla Thunderbird 2.0.0.6 Mozilla Thunderbird 2.0.0.1 Mozilla Thunderbird 2.0.0.0 Mozilla Thunderbird 2.0.0.3 Mozilla Thunderbird 2.0.0.2 Mozilla SeaMonkey 1.1.17 Mozilla Seamonkey 1.1.18 Mozilla Seamonkey 1.1.19 Mozilla Firefox 1.5.0.10 Mozilla Thunderbird 2.0.0.16 Mozilla Thunderbird 1.5.0.10 Mozilla Firefox 1.5.0.5 Mozilla Firefox 1.5.0.8 Mozilla Thunderbird 3.0.6 Mozilla Thunderbird 1.5.0.14 Mozilla Firefox 1.5.0.9 Mozilla Thunderbird 1.5.0.11 Mozilla Thunderbird 1.5.0.13 Mozilla Thunderbird 1.5.0.12 Mozilla Thunderbird 1.5.0.1 Mozilla Thunderbird 1.5.0.3 Mozilla Thunderbird 1.5.0.2 Mozilla Thunderbird 3.0.1 Mozilla Thunderbird 3.0.4 Mozilla Firefox 1.5.7 Mozilla Thunderbird 3.0.3 Mozilla Thunderbird 3.0.5 Mozilla Thunderbird 3.0.8 Mozilla Thunderbird 3.0.7 Mozilla Thunderbird 3.0.2 Mozilla Firefox 2.0.0.2 Mozilla Firefox 1.5.6 Mozilla Firefox 1.5.8 Mozilla Firefox 2.0.0.3 Mozilla Firefox 2.0.0.6 Mozilla Firefox 2.0.0.1 Mozilla Firefox 2.0.0.4 Mozilla SeaMonkey 1.1.13 Mozilla Firefox 2.0.0.7 Mozilla SeaMonkey 1.1.14 Mozilla Thunderbird 2.0.0.19 Mozilla SeaMonkey 1.1.15 Mozilla Firefox 2.0.0.5 Mozilla SeaMonkey 1.1.16 Mozilla SeaMonkey 1.1.10 Mozilla SeaMonkey 1.1.11 Mozilla Firefox 1.0 Preview Release Mozilla SeaMonkey 1.1.12 Mozilla Thunderbird 2.0.0.23 Mozilla Thunderbird 2.0.0.22 Mozilla Seamonkey 1.1.4 Mozilla Seamonkey 1.1.5 Mozilla SeaMonkey 2.0 Beta 2 Mozilla SeaMonkey 2.0 Beta 1 Mozilla Seamonkey 1.1.1 Mozilla Firefox 1.5 Mozilla Thunderbird 1.5.0.9 Mozilla Thunderbird 1.5.0.8 Mozilla SeaMonkey 1.1.8 Mozilla Thunderbird 2.0.0.21 Mozilla SeaMonkey 1.1.9 Mozilla Seamonkey 1.1.2 Mozilla Thunderbird 1.5.0.5 Mozilla Seamonkey 1.1.3 Mozilla Thunderbird 1.5.0.4 Mozilla Thunderbird 1.5.0.7 Mozilla Thunderbird 1.5.0.6 Mozilla Seamonkey 1.1.6 Mozilla Firefox 1.0 Mozilla Seamonkey 1.1.7 Mozilla SeaMonkey 1.1 beta Mozilla Firefox 3.6.10 Mozilla Firefox 3.5.6 Mozilla Thunderbird 0.7.3 Mozilla Firefox 3.5.4 Mozilla Thunderbird 0.7.1 Mozilla Firefox 3.5.7 Mozilla Thunderbird 0.7.2 Mozilla SeaMonkey 1.0 beta Mozilla SeaMonkey 2.0 Mozilla Firefox 3.5.9 Mozilla Firefox 3.5.5 Mozilla Firefox 3.5.8 Mozilla Thunderbird 1.5.2 Mozilla Thunderbird 2.0.0.9 Mozilla Thunderbird 2.0.0.8 Mozilla Thunderbird 1.5.1 Mozilla SeaMonkey 1.5.0.8 Mozilla SeaMonkey 1.5.0.9 Mozilla Thunderbird 3.1.3 Mozilla Thunderbird 3.1.2 Mozilla Thunderbird 3.1.4 Mozilla Thunderbird 3.1.1 Mozilla SeaMonkey 1.0.6 Mozilla Firefox 3.5.3 Mozilla SeaMonkey 2.0 Alpha 2 Mozilla Thunderbird 0.1 Mozilla SeaMonkey 2.0 Alpha 3 Mozilla Firefox 3.5.2 Mozilla SeaMonkey 2.0 Alpha 1 Mozilla Thunderbird 0.4 Mozilla Thunderbird 0.5 Mozilla Firefox 3.5.1 Mozilla Thunderbird 0.2 Mozilla Thunderbird 0.3 Mozilla Firefox 3.6.7 Mozilla Firefox 3.6.4 Mozilla Firefox 3.6.9 Mozilla Firefox 3.6.8 Mozilla Thunderbird 0.8 Mozilla Thunderbird 0.9 Mozilla Thunderbird 0.6 Mozilla Thunderbird 0.7 Mozilla SeaMonkey 1.1 Mozilla Firefox 2.0.0.8 Mozilla Thunderbird 1.5 Beta 2 Mozilla Firefox 1.5.1 Mozilla Firefox 1.5.3 Mozilla SeaMonkey 1.0 Mozilla Firefox 1.5.4 Mozilla Firefox 1.5.2 Mozilla Firefox 1.5.5 Mozilla Firefox 3.6.6 Mozilla Firefox 3.6.3 Mozilla Firefox 3.6.2 Mozilla Thunderbird 3.1 Mozilla Thunderbird 3.0 Mozilla SeaMonkey 1.5.0.10 Mozilla Firefox 1.0.5 Mozilla Firefox 1.0.3 Mozilla Firefox 1.0.6 Mozilla Firefox 1.0.8 Mozilla Firefox 3.5.10 Mozilla Firefox 1.0.4 Mozilla Firefox 1.0.7 Mozilla Firefox 3.5.12 Mozilla Firefox 1.0.1 Mozilla Firefox 3.5.13 Mozilla Firefox 3.5.11 Mozilla Firefox 1.0.2 Mozilla Firefox 2.0 Mozilla Thunderbird 1.0.5 Mozilla Thunderbird 1.0.6 Mozilla Thunderbird 1.0.3 Mozilla Thunderbird 1.0.4 Mozilla Thunderbird 2.0 Mozilla Thunderbird 1.0.7 Mozilla Thunderbird 1.0.8 Mozilla Thunderbird 1.0.1 Mozilla Thunderbird 1.0.2 Mozilla Firefox 2.0.0.9