CVE ID:	CVE-2010-3173
Description:	The SSL implementation in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 does not properly set the minimum key length for Diffie-Hellman Ephemeral (DHE) mode, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack.
Test IDs:	1.3.6.1.4.1.25623.1.0.68457
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2010-3173 Debian Security Information: DSA-2123 (Google Search) http://www.debian.org/security/2010/dsa-2123 http://www.mandriva.com/security/advisories?name=MDVSA-2010:210 http://www.mandriva.com/security/advisories?name=MDVSA-2010:211 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12118 RedHat Security Advisories: RHSA-2010:0781 http://www.redhat.com/support/errata/RHSA-2010-0781.html RedHat Security Advisories: RHSA-2010:0782 http://www.redhat.com/support/errata/RHSA-2010-0782.html http://secunia.com/advisories/41839 http://secunia.com/advisories/42867 http://www.ubuntu.com/usn/USN-1007-1 http://www.vupen.com/english/advisories/2011/0061