Search for vulnerabilities
Vulnerability details: VCID-ye43-arpb-aaab
Vulnerability ID VCID-ye43-arpb-aaab
Aliases CVE-2005-2969
VC-OPENSSL-20051011-CVE-2005-2969
Summary A deprecated option, SSL_OP_MISE_SSLV2_RSA_PADDING, could allow an attacker acting as a "man in the middle" to force a connection to downgrade to SSL 2.0 even if both parties support better protocols.
Status Published
Exploitability 0.5
Weighted Severity 6.2
Risk 3.1
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
rhas Moderate https://access.redhat.com/errata/RHSA-2005:800
rhas Moderate https://access.redhat.com/errata/RHSA-2008:0264
rhas Moderate https://access.redhat.com/errata/RHSA-2008:0525
rhas Moderate https://access.redhat.com/errata/RHSA-2008:0629
epss 0.01068 https://api.first.org/data/v1/epss?cve=CVE-2005-2969
epss 0.01068 https://api.first.org/data/v1/epss?cve=CVE-2005-2969
epss 0.01068 https://api.first.org/data/v1/epss?cve=CVE-2005-2969
epss 0.01068 https://api.first.org/data/v1/epss?cve=CVE-2005-2969
epss 0.01068 https://api.first.org/data/v1/epss?cve=CVE-2005-2969
epss 0.01068 https://api.first.org/data/v1/epss?cve=CVE-2005-2969
epss 0.01068 https://api.first.org/data/v1/epss?cve=CVE-2005-2969
epss 0.01068 https://api.first.org/data/v1/epss?cve=CVE-2005-2969
epss 0.01068 https://api.first.org/data/v1/epss?cve=CVE-2005-2969
epss 0.01068 https://api.first.org/data/v1/epss?cve=CVE-2005-2969
epss 0.01068 https://api.first.org/data/v1/epss?cve=CVE-2005-2969
epss 0.01068 https://api.first.org/data/v1/epss?cve=CVE-2005-2969
epss 0.01813 https://api.first.org/data/v1/epss?cve=CVE-2005-2969
epss 0.01813 https://api.first.org/data/v1/epss?cve=CVE-2005-2969
epss 0.01813 https://api.first.org/data/v1/epss?cve=CVE-2005-2969
epss 0.01813 https://api.first.org/data/v1/epss?cve=CVE-2005-2969
epss 0.08921 https://api.first.org/data/v1/epss?cve=CVE-2005-2969
epss 0.08921 https://api.first.org/data/v1/epss?cve=CVE-2005-2969
epss 0.08921 https://api.first.org/data/v1/epss?cve=CVE-2005-2969
epss 0.08921 https://api.first.org/data/v1/epss?cve=CVE-2005-2969
epss 0.08921 https://api.first.org/data/v1/epss?cve=CVE-2005-2969
epss 0.08921 https://api.first.org/data/v1/epss?cve=CVE-2005-2969
epss 0.08921 https://api.first.org/data/v1/epss?cve=CVE-2005-2969
epss 0.08921 https://api.first.org/data/v1/epss?cve=CVE-2005-2969
epss 0.08921 https://api.first.org/data/v1/epss?cve=CVE-2005-2969
epss 0.08921 https://api.first.org/data/v1/epss?cve=CVE-2005-2969
epss 0.08921 https://api.first.org/data/v1/epss?cve=CVE-2005-2969
epss 0.08921 https://api.first.org/data/v1/epss?cve=CVE-2005-2969
epss 0.08921 https://api.first.org/data/v1/epss?cve=CVE-2005-2969
epss 0.08921 https://api.first.org/data/v1/epss?cve=CVE-2005-2969
epss 0.08921 https://api.first.org/data/v1/epss?cve=CVE-2005-2969
epss 0.08921 https://api.first.org/data/v1/epss?cve=CVE-2005-2969
epss 0.08921 https://api.first.org/data/v1/epss?cve=CVE-2005-2969
epss 0.08921 https://api.first.org/data/v1/epss?cve=CVE-2005-2969
epss 0.08921 https://api.first.org/data/v1/epss?cve=CVE-2005-2969
epss 0.08921 https://api.first.org/data/v1/epss?cve=CVE-2005-2969
epss 0.08921 https://api.first.org/data/v1/epss?cve=CVE-2005-2969
epss 0.08921 https://api.first.org/data/v1/epss?cve=CVE-2005-2969
epss 0.08921 https://api.first.org/data/v1/epss?cve=CVE-2005-2969
epss 0.08921 https://api.first.org/data/v1/epss?cve=CVE-2005-2969
epss 0.08921 https://api.first.org/data/v1/epss?cve=CVE-2005-2969
epss 0.08921 https://api.first.org/data/v1/epss?cve=CVE-2005-2969
epss 0.08921 https://api.first.org/data/v1/epss?cve=CVE-2005-2969
epss 0.08921 https://api.first.org/data/v1/epss?cve=CVE-2005-2969
epss 0.08921 https://api.first.org/data/v1/epss?cve=CVE-2005-2969
epss 0.08921 https://api.first.org/data/v1/epss?cve=CVE-2005-2969
epss 0.08921 https://api.first.org/data/v1/epss?cve=CVE-2005-2969
epss 0.08921 https://api.first.org/data/v1/epss?cve=CVE-2005-2969
epss 0.08921 https://api.first.org/data/v1/epss?cve=CVE-2005-2969
epss 0.08921 https://api.first.org/data/v1/epss?cve=CVE-2005-2969
epss 0.08921 https://api.first.org/data/v1/epss?cve=CVE-2005-2969
epss 0.08921 https://api.first.org/data/v1/epss?cve=CVE-2005-2969
epss 0.08921 https://api.first.org/data/v1/epss?cve=CVE-2005-2969
epss 0.08921 https://api.first.org/data/v1/epss?cve=CVE-2005-2969
epss 0.08921 https://api.first.org/data/v1/epss?cve=CVE-2005-2969
epss 0.08921 https://api.first.org/data/v1/epss?cve=CVE-2005-2969
epss 0.08921 https://api.first.org/data/v1/epss?cve=CVE-2005-2969
epss 0.08921 https://api.first.org/data/v1/epss?cve=CVE-2005-2969
epss 0.08921 https://api.first.org/data/v1/epss?cve=CVE-2005-2969
epss 0.08921 https://api.first.org/data/v1/epss?cve=CVE-2005-2969
epss 0.08921 https://api.first.org/data/v1/epss?cve=CVE-2005-2969
epss 0.08921 https://api.first.org/data/v1/epss?cve=CVE-2005-2969
epss 0.08921 https://api.first.org/data/v1/epss?cve=CVE-2005-2969
epss 0.08921 https://api.first.org/data/v1/epss?cve=CVE-2005-2969
epss 0.08921 https://api.first.org/data/v1/epss?cve=CVE-2005-2969
epss 0.08921 https://api.first.org/data/v1/epss?cve=CVE-2005-2969
epss 0.08921 https://api.first.org/data/v1/epss?cve=CVE-2005-2969
epss 0.08921 https://api.first.org/data/v1/epss?cve=CVE-2005-2969
epss 0.20048 https://api.first.org/data/v1/epss?cve=CVE-2005-2969
rhbs low https://bugzilla.redhat.com/show_bug.cgi?id=430660
cvssv2 5.0 https://nvd.nist.gov/vuln/detail/CVE-2005-2969
Reference id Reference type URL
ftp://ftp.software.ibm.com/pc/pccbbs/pc_servers/dir5.10.3_docs_relnotes.pdf
http://docs.info.apple.com/article.html?artnum=302847
http://itrc.hp.com/service/cki/docDisplay.do?docId=c00805100
http://itrc.hp.com/service/cki/docDisplay.do?docId=c00849540
http://lists.trustix.org/pipermail/tsl-announce/2005-October/000354.html
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-2969.json
https://api.first.org/data/v1/epss?cve=CVE-2005-2969
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2969
http://secunia.com/advisories/17146
http://secunia.com/advisories/17151
http://secunia.com/advisories/17153
http://secunia.com/advisories/17169
http://secunia.com/advisories/17178
http://secunia.com/advisories/17180
http://secunia.com/advisories/17189
http://secunia.com/advisories/17191
http://secunia.com/advisories/17210
http://secunia.com/advisories/17259
http://secunia.com/advisories/17288
http://secunia.com/advisories/17335
http://secunia.com/advisories/17344
http://secunia.com/advisories/17389
http://secunia.com/advisories/17409
http://secunia.com/advisories/17432
http://secunia.com/advisories/17466
http://secunia.com/advisories/17589
http://secunia.com/advisories/17617
http://secunia.com/advisories/17632
http://secunia.com/advisories/17813
http://secunia.com/advisories/17888
http://secunia.com/advisories/18045
http://secunia.com/advisories/18123
http://secunia.com/advisories/18165
http://secunia.com/advisories/18663
http://secunia.com/advisories/19185
http://secunia.com/advisories/21827
http://secunia.com/advisories/23280
http://secunia.com/advisories/23340
http://secunia.com/advisories/23843
http://secunia.com/advisories/23915
http://secunia.com/advisories/25973
http://secunia.com/advisories/26893
http://secunia.com/advisories/31492
http://securitytracker.com/id?1015032
https://exchange.xforce.ibmcloud.com/vulnerabilities/35287
https://issues.rpath.com/browse/RPL-1633
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11454
http://sunsolve.sun.com/search/document.do?assetkey=1-26-101974-1
http://support.avaya.com/elmodocs2/security/ASA-2006-031.htm
http://support.avaya.com/elmodocs2/security/ASA-2006-260.htm
https://www.openssl.org/news/secadv/20051011.txt
http://www-1.ibm.com/support/docview.wss?uid=isg1SSRVHMCHMC_C081516_754
http://www.cisco.com/warp/public/707/cisco-response-20051202-openssl.shtml
http://www.debian.org/security/2005/dsa-875
http://www.debian.org/security/2005/dsa-881
http://www.debian.org/security/2005/dsa-882
http://www.hitachi-support.com/security_e/vuls_e/HS06-022_e/01-e.html
http://www.hitachi-support.com/security_e/vuls_e/HS07-016_e/index-e.html
http://www.juniper.net/support/security/alerts/PSN-2005-12-025.txt
http://www.mandriva.com/security/advisories?name=MDKSA-2005:179
http://www.novell.com/linux/security/advisories/2005_61_openssl.html
http://www.openssl.org/news/secadv_20051011.txt
http://www.redhat.com/support/errata/RHSA-2005-762.html
http://www.redhat.com/support/errata/RHSA-2005-800.html
http://www.redhat.com/support/errata/RHSA-2008-0629.html
http://www.securityfocus.com/bid/15071
http://www.securityfocus.com/bid/15647
http://www.securityfocus.com/bid/24799
http://www.vupen.com/english/advisories/2005/2036
http://www.vupen.com/english/advisories/2005/2659
http://www.vupen.com/english/advisories/2005/2710
http://www.vupen.com/english/advisories/2005/2908
http://www.vupen.com/english/advisories/2005/3002
http://www.vupen.com/english/advisories/2005/3056
http://www.vupen.com/english/advisories/2006/3531
http://www.vupen.com/english/advisories/2007/0326
http://www.vupen.com/english/advisories/2007/0343
http://www.vupen.com/english/advisories/2007/2457
333500 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=333500
430660 https://bugzilla.redhat.com/show_bug.cgi?id=430660
cpe:2.3:a:openssl:openssl:0.9.7:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:openssl:openssl:0.9.7:*:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.7a:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:openssl:openssl:0.9.7a:*:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.7b:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:openssl:openssl:0.9.7b:*:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.7c:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:openssl:openssl:0.9.7c:*:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.7d:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:openssl:openssl:0.9.7d:*:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.7e:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:openssl:openssl:0.9.7e:*:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.7f:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:openssl:openssl:0.9.7f:*:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.7g:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:openssl:openssl:0.9.7g:*:*:*:*:*:*:*
cpe:2.3:a:openssl:openssl:0.9.8:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:openssl:openssl:0.9.8:*:*:*:*:*:*:*
CVE-2005-2969 https://nvd.nist.gov/vuln/detail/CVE-2005-2969
RHSA-2005:800 https://access.redhat.com/errata/RHSA-2005:800
RHSA-2005:882 https://access.redhat.com/errata/RHSA-2005:882
RHSA-2008:0264 https://access.redhat.com/errata/RHSA-2008:0264
RHSA-2008:0525 https://access.redhat.com/errata/RHSA-2008:0525
RHSA-2008:0629 https://access.redhat.com/errata/RHSA-2008:0629
USN-204-1 https://usn.ubuntu.com/204-1/
No exploits are available.
Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2005-2969
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Exploit Prediction Scoring System (EPSS)
Percentile 0.84618
EPSS Score 0.01068
Published At Nov. 1, 2024, midnight
Date Actor Action Source VulnerableCode Version
There are no relevant records.