Test ID:	1.3.6.1.4.1.25623.1.0.147065
Category:	General
Title:	OpenLDAP 2.4.x Weak Cipher Vulnerability
Summary:	OpenLDAP is prone to a weak cipher vulnerability.
Description:	Summary: OpenLDAP is prone to a weak cipher vulnerability. Vulnerability Insight: The nss_parse_ciphers function in libraries/libldap/tls_m.c does not properly parse OpenSSL-style multi-keyword mode cipher strings, which might cause a weaker than intended cipher to be used and allow remote attackers to have unspecified impact via unknown vectors. Affected Software/OS: OpenLDAP version 2.4.x. Solution: Update to version 2.5 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2015-3276 1034221 http://www.securitytracker.com/id/1034221 RHSA-2015:2131 http://rhn.redhat.com/errata/RHSA-2015-2131.html http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html https://bugzilla.redhat.com/show_bug.cgi?id=1238322
Copyright	Copyright (C) 2021 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.