2016年9月8日にApache HTTP Serverの脆弱性情報が公開されました。
対応が必要か検討してください。
Secure Sockets Layer (SSL) および Transport Layer Security (TLS) プロトコルには、renegotiation 機能に脆弱性が存在します。 Secure Sockets Layer (SSL) および Transport Layer Security (TLS) は、通信の暗号化および認証などの機能を提供するプロトコルです。 SSL および TLS プロトコルには、renegotiation 機能に起因する脆弱性が存在します。
製品：Apache HTTP Server
企業：Apache Software Foundation
CVSS v2
CVSS v3

参考：CVSSの深刻度レベル

スコア	CVSS v2	CVSS v3
9.0～10.0	危険	緊急
7.0～8.9	危険	重要
4.0～6.9	警告	警告
0.1～3.9	注意	注意
0	注意	なし

JVN JVNDB-2009-002319
https://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002319.html
JVN JVNVU#120541
http://jvn.jp/cert/JVNVU120541
JVN JVNVU#490671
http://jvn.jp/cert/JVNVU490671
JVNTR JVNTR-2010-22
http://jvn.jp/tr/JVNTR-2010-22
CVE CVE-2009-3555
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3555
NVD CVE-2009-3555
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-3555
CERT-SA SA10-222A
http://www.us-cert.gov/cas/alerts/SA10-222A.html
CERT-VN VU#120541
http://www.kb.cert.org/vuls/id/120541
CERT-TA TA10-222A
http://www.us-cert.gov/cas/techalerts/TA10-222A.html
SECUNIA SA37453
http://secunia.com/advisories/37453
SECUNIA SA37566
http://secunia.com/advisories/37566
SECUNIA SA38020
http://secunia.com/advisories/38020
SECUNIA SA38338
http://secunia.com/advisories/38338
SECUNIA SA38728
http://secunia.com/advisories/38728
SECUNIA SA38608
http://secunia.com/advisories/38608
SECUNIA SA39136
http://secunia.com/advisories/39136
SECUNIA SA39243
http://secunia.com/advisories/39243
SECUNIA SA39242
http://secunia.com/advisories/39242
SECUNIA SA39500
http://secunia.com/advisories/39500
SECUNIA SA40747
http://secunia.com/advisories/40747
SECUNIA SA40879
http://secunia.com/advisories/40879
SECUNIA SA44292
http://secunia.com/advisories/44292
SECUNIA SA44293
http://secunia.com/advisories/44293
SECUNIA SA44260
http://secunia.com/advisories/44260
BID 36935
http://www.securityfocus.com/bid/36935
VUPEN VUPEN/ADV-2009-3313
http://www.vupen.com/english/advisories/2009/3313
VUPEN VUPEN/ADV-2009-3310
http://www.vupen.com/english/advisories/2009/3310
VUPEN VUPEN/ADV-2009-3393
http://www.vupen.com/english/advisories/2009/3393
VUPEN VUPEN/ADV-2010-0086
http://www.vupen.com/english/advisories/2010/0086
VUPEN VUPEN/ADV-2010-0125
http://www.vupen.com/english/advisories/2010/0125
VUPEN VUPEN/ADV-2010-0212
http://www.vupen.com/english/advisories/2010/0212
VUPEN VUPEN/ADV-2010-0457
http://www.vupen.com/english/advisories/2010/0457
VUPEN VUPEN/ADV-2010-0982
http://www.vupen.com/english/advisories/2010/0982
VUPEN VUPEN/ADV-2010-1280
http://www.vupen.com/english/advisories/2010/1280
VUPEN VUPEN/ADV-2010-1942
http://www.vupen.com/english/advisories/2010/1942
VUPEN VUPEN/ADV-2010-2046
http://www.vupen.com/english/advisories/2010/2046
VUPEN VUPEN/ADV-2010-2660
http://www.vupen.com/english/advisories/2010/2660
VUPEN VUPEN/ADV-2011-1039
http://www.vupen.com/english/advisories/2011/1039
VUPEN VUPEN/ADV-2010-3126
http://www.vupen.com/english/advisories/2010/3126
VUPEN VUPEN/ADV-2010-3086
http://www.vupen.com/english/advisories/2010/3086
CWE-310
https://jvndb.jvn.jp/ja/cwe/CWE-310.html
登録日
2016/09/08 08:10:00
最終更新日
2016/09/08 08:10:00
もっと見る >>