CVE-2015-3152 Security feature bypass in n/a
Man-in-the-middle attackers can downgrade SSL connections to cleartext, allowing them to spoof servers and intercept or modify database traffic.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2015-3152?
CVE-2015-3152 is a medium-severity vulnerability in Debian Debian Linux, published on 16 May 2016. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Oracle MySQL before 5.7.3, Oracle MySQL Connector/C (aka libmysqlclient) before 6.1.3, and MariaDB before 5.5.44 use the --ssl option to mean that SSL is optional, which allows man-in-the-middle attackers to spoof servers via a cleartext-downgrade attack, aka a "BACKRONYM" attack.
Weakness: CWE-295
Which versions are affected by CVE-2015-3152?
It affects 12 products.
Products include Debian Debian Linux, Fedoraproject Fedora, Mariadb Mariadb, Oracle Mysql, Oracle Mysql Connector\/C, Php Php and 6 more.
How do I fix CVE-2015-3152?
Upgrade to a fixed version.
Is CVE-2015-3152 being exploited?
There is no known exploitation of CVE-2015-3152 in the wild and no public exploit code.
Public exploit code: 1 proofs of concept on GitHub.
Other vulnerabilities in Debian Debian Linux
Sources
Also known as GHSA-p7qr-v5jx-7qv3, UBUNTU-CVE-2015-3152.