NetSight
IP …
low3.4

CVE-2014-3566

The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle atta…

Impact

The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the "POODLE" issue.

Affected products

VendorProductAffected versions
RedhatEnterprise Linux
Version 5
RedhatEnterprise Linux Desktop
Versions 6.0, 7.0
RedhatEnterprise Linux Desktop Supplementary
Versions 5.0, 6.0
RedhatEnterprise Linux Server
Versions 6.0, 7.0
RedhatEnterprise Linux Server Supplementary
Versions 5.0, 6.0, 7.0
RedhatEnterprise Linux Workstation
Versions 6.0, 7.0
RedhatEnterprise Linux Workstation Supplementary
Versions 6.0, 7.0
IbmAix
Versions 5.3, 6.1, 7.1
AppleMac Os X
through 10.10.1
MageiaMageia
Versions 3.0, 4.0
NovellSuse Linux Enterprise Desktop
Versions 9.0, 10.0, 11.0, 12.0
NovellSuse Linux Enterprise Software Development Kit
Versions 11.0, 12.0

Weakness classification

CWE-310CWE-329

References