proftpd: weak key usage
| Package(s): | proftpd | CVE #(s): | CVE-2016-3125 | ||||||||||||||||||||
| Created: | March 21, 2016 | Updated: | June 13, 2016 | ||||||||||||||||||||
| Description: | From the Red Hat bugzilla:
The ProFTPD daemon supports TLS encrypted connections via the mod_tls module. This module has a configuration option TLSDHParamFile to specify user-defined Diffie Hellman parameters. A vulnerability was found in ProFTPD before 1.3.5b. The software would ignore the user-defined parameters and use Diffie Hellman key exchanges with 1024 bit | ||||||||||||||||||||||
| Alerts: |
| ||||||||||||||||||||||