Erlang/OTP CVE-2015-2774 Man In The Middle Information Disclosure Vulnerability
BID:73398
Info
Erlang/OTP CVE-2015-2774 Man In The Middle Information Disclosure Vulnerability
| Bugtraq ID: | 73398 |
| Class: | Design Error |
| CVE: |
CVE-2015-2774 |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 27 2015 12:00AM |
| Updated: | Mar 27 2015 12:00AM |
| Credit: | Hanno Böck |
| Vulnerable: |
Erlang Erlang/Otp R15B03 Erlang Erlang/Otp R14b03 Erlang Erlang/OTP R14B02 Erlang Erlang/OTP R14B01 Erlang Erlang/OTP R14B Erlang Erlang/OTP R14A Erlang Erlang/Otp R13b04 Erlang Erlang/Otp R13b03 Erlang Erlang/Otp R13b02-1 Erlang Erlang/Otp R13b Erlang Erlang/Otp R12b-5 Erlang Erlang/Otp R11b-5 Erlang Erlang/Otp 17 |
| Not Vulnerable: |
Erlang Erlang/Otp 18.0-rc1 |
Discussion
Erlang/OTP CVE-2015-2774 Man In The Middle Information Disclosure Vulnerability
Erlang/OTP is prone to an information disclosure vulnerability.
An attacker can exploit this issue to perform man-in-the-middle attacks and obtain sensitive information. Successful exploits will lead to other attacks.
Erlang/OTP is prone to an information disclosure vulnerability.
An attacker can exploit this issue to perform man-in-the-middle attacks and obtain sensitive information. Successful exploits will lead to other attacks.
Exploit / POC
Erlang/OTP CVE-2015-2774 Man In The Middle Information Disclosure Vulnerability
An attacker may use readily available tools to exploit this issue.
An attacker may use readily available tools to exploit this issue.
Solution / Fix
Erlang/OTP CVE-2015-2774 Man In The Middle Information Disclosure Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Erlang/OTP CVE-2015-2774 Man In The Middle Information Disclosure Vulnerability
References:
References:
- Erlang POODLE TLS vulnerability (Seclists.org)
- Erlang/OTP 18.0-rc1 is available for testing (erlang)